Sega reports 2,196,044 email addresses leaked at mailing provider

Sega says email addresses used for some of its and Sega Fave’s newsletters leaked after unauthorized access to mailing provider Arara. The company notice counts 2,196,044 email addresses.

Of those records, 92,273 also included information associated with distribution, the nature of which is still being investigated. Sega says addresses registered to SEGA Account use a different system and are outside this leak’s scope. It says the leaked information did not include names, dates of birth, street addresses, phone numbers, credit card details or login passwords.

The affected mailings included messages about Tokyo Game Show and arcade products. Sega described unauthorized access to Sega Fave’s arcade network servers as a separate incident.

Sega warned that messages could impersonate it, Sega Fave or Arara, and asked recipients not to open links or attachments in unfamiliar emails or reply to them. The company said neither it nor Sega Fave asks for passwords or credit card details by email. It had found no misuse of the leaked information as of its notice, suspended mailing through Arara and plans to contact affected customers individually once details are confirmed.