Paycloud Holdings Inc.
Unauthorized Access to “Arara Message” Provided by Our Consolidated Subsidiary Resulting in Data Leakage and Service Suspension (Second Report)
Unauthorized access involving consolidated subsidiary Arara Inc.'s "Arara Message" has expanded, revealing unauthorized extraction of contracted client environments including 97 servers. An estimated 7,700,000 or more email addresses may have been leaked, and customer data such as names and dates of birth could also be included. The service was suspended on October 31 and the resumption date is undecided. Ongoing assessment of impacts; a third report will disclose further details.
Key Figures
- Number of leaked email addresses: approx. 3,386,187 addresses (after deduplication)
- Newly leaked member information (including names, etc.): up to approx. 411,827 records
- Service suspension date: 2026-10-31 (suspension completed: same day 19:53)
AI要約
Overview of the Incident and Current Status
Unauthorized access affecting Arara Message provided by consolidated subsidiary Arara Inc. has expanded, and it has newly been identified that data, including client membership information of contracted companies, may have been taken externally. The leakage scale potentially includes approximately 3,386,187 email addresses (after deduplication) and up to 411,827 registered records of contracted companies, and additional extraction from server environments has been confirmed. The service was suspended on October 31, 2026, and the timing for resumption is undecided. Any financial impact will be disclosed in the third report.
Scope of Impact and Future Response
The affected environments include multiple environments for contracted companies. To prevent impact on end users, we plan to notify affected parties and require password and authentication information changes or resets. We will continue reporting to public authorities, work with specialized organizations to identify causes and the scope of impact, and implement measures to prevent recurrence. The impact on the fiscal year ending August 2027 is currently undetermined; should there be a financial impact, we will promptly disclose it.
Paycloud Holdings Inc.
Company overview · Stock price · Financial data · All IR
