Asoview announced that “Arara Message,” an email distribution service provided by Arara that it uses, was subject to unauthorized access by a third party, resulting in the external leak of some information belonging to members of “Asoview!”
A total of 15,821,184 records were leaked. The affected individuals are members who were sent emails using the service. The leaked data includes email addresses; member information such as member IDs and membership numbers, names, gender, dates of birth, membership registration dates, and most recent login dates; contact information including telephone numbers, postal codes, and residential areas; and ticket purchase and usage information, including purchase dates and times, ticket types, number of tickets purchased, names of facilities used, dates and times of use, number of participants, and whether cancellations were made. Passwords and credit card information were not included in the leak.
Asoview received a report from Arara on November 2 and, on the same day, suspended all email distributions using Arara Message and invalidated authentication information, including passwords for the administration screen and API keys. On November 3, it received a report from Arara regarding the number of leaked records and the data categories involved, and plans to submit an initial report to Japan’s Personal Information Protection Commission and the Japan Institute for Promotion of Digital Economy and Community (JIPDEC).
At this time, it has not been possible to identify which members the leaked email addresses belong to, and Arara is currently investigating information on the affected individuals. After receiving the information, Asoview will conduct a cross-check and contact affected individuals directly. No damage resulting from misuse of the leaked information has been confirmed.
The company is urging caution, noting that suspicious emails, SMS messages, or phone calls misusing the leaked information may be received. It stated that it will never request passwords or credit card information by email, SMS, or telephone.
