---
title: Sega Customer Emails Exposed in Third-Party Vendor Breach
description: Hackers who broke into Japanese mail provider Arara took the addresses Sega uses for its newsletters. Names and passwords weren’t included.
canonical_url: https://codekeeper.co/ticker/sega-customer-emails-exposed-in-third-party-vendor-breach
---

[Cyberattacks](https://codekeeper.co/ticker/tag/cyberattacks) | [Data breaches](https://codekeeper.co/ticker/tag/data-breaches)

# Sega Customer Emails Exposed in Third-Party Vendor Breach

Hackers who broke into Japanese mail provider Arara took the addresses Sega uses for its newsletters. Names and passwords weren’t included.

![Content Team](https://codekeeper.co/hubfs/_sized/Codekeeper_21_beeldmerkL-800.png)

By Content Team Nov 9, 2026

Share [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsega-customer-emails-exposed-in-third-party-vendor-breach%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsega-customer-emails-exposed-in-third-party-vendor-breach%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsega-customer-emails-exposed-in-third-party-vendor-breach%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsega-customer-emails-exposed-in-third-party-vendor-breach%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsega-customer-emails-exposed-in-third-party-vendor-breach%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsega-customer-emails-exposed-in-third-party-vendor-breach%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

ON THIS PAGE

### Want more insights like this?

Subscribe to our newsletter to get the latest software protection strategies delivered to your inbox.

By submitting your email, you consent to Codekeeper contacting you and agree to our [privacy policy](https://codekeeper.co/privacy-policy) .

Sega has confirmed that 2.2 million customer email addresses were exposed after hackers breached Arara Inc., a Japanese email delivery provider the company uses for newsletters. The attack occurred on October 28, 2026, when an unauthorized party exploited vulnerabilities in Arara’s web servers. Arara suspended its distribution service on October 31. The leaked data is limited to email addresses. No names, passwords, credit card details, or other personal information were compromised. No misuse has been confirmed yet, but Sega is urging customers to delete any suspicious emails claiming to be from Sega or its subsidiary Sega Fave, and never click unknown links or attachments. Arara’s parent, Paycloud Holdings, first estimated on November 2 that up to 77 million addresses from around 380 client companies may have been taken, some with names and phone numbers. Paycloud has since revised that to about 3.4 million unique addresses across 61 companies. The attacker also used the hijacked service to send millions of phishing emails. Source: [Infosecurity Magazine](https://www.infosecurity-magazine.com/news/email-sega-customers-vendor-breach/)

Share this article [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsega-customer-emails-exposed-in-third-party-vendor-breach%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsega-customer-emails-exposed-in-third-party-vendor-breach%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsega-customer-emails-exposed-in-third-party-vendor-breach%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsega-customer-emails-exposed-in-third-party-vendor-breach%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsega-customer-emails-exposed-in-third-party-vendor-breach%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsega-customer-emails-exposed-in-third-party-vendor-breach%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

![blog_book_a_demo_cta_3x](https://codekeeper.co/hubfs/_sized/Codekeeper%202025/blog_book_a_demo_cta_3x-768x512.webp)

Have questions about protecting your software?

Our escrow experts are standing by to help.

[Book a free demo](https://codekeeper.co/book-a-demo)

YOU MAY ALSO LIKE

[Cyberattacks SonicWall Warns of Actively Exploited SSLVPN Flaw That Can Bypass MFA Nov 9, 2026](https://codekeeper.co/ticker/sonicwall-warns-of-actively-exploited-sslvpn-flaw-that-can-bypass-mfa)

[Cyberattacks 320,000 School Files Leaked on Dark Web After Bristol Council Hack Nov 9, 2026](https://codekeeper.co/ticker/320000-school-files-leaked-on-dark-web-after-bristol-council-hack)

[Cyberattacks FBI and CISA Warn Hackers Are Targeting Refrigeration Controllers Nov 9, 2026](https://codekeeper.co/ticker/fbi-and-cisa-warn-hackers-are-targeting-refrigeration-controllers)

[Cyberattacks Russia’s APT29 Hijacked a Web Tracker to Spy on Unpatched Phones Nov 6, 2026](https://codekeeper.co/ticker/russias-apt29-hijacked-a-web-tracker-to-spy-on-unpatched-phones)