Japanese gaming company SEGA has disclosed that a data breach at its third‑party newsletter provider, ARARA, exposed the email addresses of approximately 2.2 million subscribers to the firm’s newsletters.
ARARA, which handles SEGA’s email communications on its behalf, reported the incident after detecting unauthorized access to its mailing list database. The breach was identified by the provider, prompting SEGA to inform the public of the exposure.
The compromised data consists solely of email addresses; SEGA’s statement did not mention any additional personal information such as passwords, payment details, or demographic data being accessed.
While the loss of email addresses does not directly reveal financial or identity details, it can increase the risk of targeted phishing attempts and spam for the affected users. Cybersecurity experts routinely advise individuals who receive unsolicited messages to verify the sender and avoid clicking suspicious links.
SEGA said it is cooperating with ARARA to investigate the cause of the breach and to reinforce security measures for future communications. Subscribers who receive unexpected emails from the company are encouraged to remain vigilant and report any suspicious activity.
<small>Source: Bleeping Computer — read the original story there.</small>
