A cyberattack on the Arara messaging app resulted in the leak of approximately 77 million email addresses.

JIJI Press, The Japan Times · Japan

3 Nov 2026

What it means

Arara Message is a Japanese email distribution (bulk mail) platform, not a consumer messaging app: a cyberattack on it exfiltrated roughly 77 million email addresses, plus some names, birth dates, phone numbers and addresses, from the data of up to 380 client businesses. This is a where the vendor's compromise exposed its customers' end-user data.

Accuracy & sourcesSourced

The claim comes from JIJI Press (a reputable Japanese news agency) and is corroborated by multiple independent outlets, all consistent with an apparent company disclosure. The headline figure of 77 million and the scope (up to 380 ) are widely repeated, though the exact record count and affected data fields may be refined as investigations continue.

How new

Genuinely new: this broke in early November 2026, with reporting dated November 1–2, 2026, and no indication of older material being re-circulated.

Past coverage

We covered this exact breach in the 2026-11-03 digest, reporting that 77 million email addresses had been leaked from Arara Message due to a cyberattack.