Unauthorized access involving consolidated subsidiary Arara Inc.’s “Arara Message” has expanded, revealing unauthorized extraction of contracted client environments including 97 servers. An estimated 7,700,000 or more email addresses may have been leaked, and customer data such as names and dates of birth could also be included. The service was suspended on October 31 and the resumption date is undecided. Ongoing assessment of impacts; a third report will disclose further details.<\/p>\n","protected":false},"comment_status":"open","ping_status":"closed","template":"","meta":{"Ticker":"","DATE":"","longName":"","company_name_ja":"","fullTimeEmployees":0,"address":"","phone":"","website":"","industry":"","sector":"","regularMarketPrice":0,"financialCurrency":"","marketCap":0,"fiftyTwoWeekLow":0,"fiftyTwoWeekHigh":0,"epsTrailingTwelveMonths":0,"epsForward":0,"bookValue":0,"totalRevenue":0,"OperatingIncome":0,"operatingMargins":0,"NetIncome":0,"profitMargins":0,"ebitda":0,"trailingPE":0,"forwardPE":0,"priceToBook":0,"returnOnEquity":0,"recommendationMean":0,"recommendationKey":"","targetMeanPrice":0,"numberOfAnalystOpinions":0,"analyst_earnings_data":"","dividendRate":0,"dividendYield":0,"payoutRatio":0,"totalEsg":0,"environmentScore":0,"socialScore":0,"governanceScore":0,"title":"","providerPublishTime":"","link":"","longBusinessSummary":"","longBusinessSummary_ja":"","quarterly_revenue":0,"quarterly_net_income":0,"quarterly_operating_profit":0,"enterprise_value":0,"price_fetched_at":"","company_officer_1_name":"","company_officer_1_title":"","company_officer_2_name":"","company_officer_2_title":"","company_officer_3_name":"","company_officer_3_title":"","company_officer_4_name":"","company_officer_4_title":"","company_officer_5_name":"","company_officer_5_title":"","company_officers_update_time":"","get_dividend_history_year1":0,"get_dividend_history_year2":0,"get_dividend_history_year3":0,"get_dividend_history_year4":0,"get_dividend_history_year5":0,"get_dividend_history_year6":0,"get_dividend_history_year7":0,"get_dividend_history_year8":0,"get_dividend_history_year9":0,"get_dividend_history_year10":0,"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"jir_stock_code":"4015","jir_company_name":"Paycloud Holdings Inc.","jir_importance":"\u2605\u2605\u2605\u2606\u2606","jir_publication_date":"2026-11-02","jir_source_link":"https:\/\/japanir.jp\/wp-content\/uploads\/2026\/11\/4015-20261102-01.pdf","jir_short_summary":"Unauthorized access involving consolidated subsidiary Arara Inc.'s \"Arara Message\" has expanded, revealing unauthorized extraction of contracted client environments including 97 servers. An estimated 7,700,000 or more email addresses may have been leaked, and customer data such as names and dates of birth could also be included. The service was suspended on October 31 and the resumption date is undecided. Ongoing assessment of impacts; a third report will disclose further details.","jir_summary":"### Overview of the Incident and Current Status\nUnauthorized access affecting Arara Message provided by consolidated subsidiary Arara Inc. has expanded, and it has newly been identified that data, including client membership information of contracted companies, may have been taken externally. The leakage scale potentially includes approximately 3,386,187 email addresses (after deduplication) and up to 411,827 registered records of contracted companies, and additional extraction from server environments has been confirmed. The service was suspended on October 31, 2026, and the timing for resumption is undecided. Any financial impact will be disclosed in the third report.\n\n### Scope of Impact and Future Response\nThe affected environments include multiple environments for contracted companies. To prevent impact on end users, we plan to notify affected parties and require password and authentication information changes or resets. We will continue reporting to public authorities, work with specialized organizations to identify causes and the scope of impact, and implement measures to prevent recurrence. The impact on the fiscal year ending August 2027 is currently undetermined; should there be a financial impact, we will promptly disclose it.","jir_financial_highlights":"Number of records leaked: approx. 77,000,000 records (current investigation) (Unknown)\nService suspension period: Service suspended from October 31, 2026 (suspension completed on the same day at 19:53) (Unknown)","jir_category":"","jir_hashtags":"#PaycloudHoldingsInc., #DisclosureUpdate, #DataLeak, #AraraMessage","jir_key_figures":"Number of leaked email addresses: approx. 3,386,187 addresses (after deduplication)\nNewly leaked member information (including names, etc.): up to approx. 411,827 records\nService suspension date: 2026-10-31 (suspension completed: same day 19:53)","jir_meta_title":"Paycloud Holdings Inc. Arara Message Unauthorized Access Second Report | November 2026","jir_meta_description":"Additional findings disclosed regarding unauthorized access and data leakage in Arara Message provided by consolidated subsidiary Arara Inc. The number of leaked records exceeds approx. 7.7 million; the service is currently suspended. Financial impact will be disclosed in a third report if determined.","jir_og_title":"Paycloud HD: Arara Message Unauthorized Access Second Report","jir_og_description":"Additional findings on unauthorized access and data leakage in Arara Message have been disclosed. The number of leaked records exceeds approx. 7.7 million and the service remains suspended. Financial impact will be disclosed in the third report.","jir_og_image_url":"\/assets\/og\/company-general_ir.jpg","jir_chart_data_collection":"[]","ir_related_company":122829,"ir_release_date":"","ir_type":"","ir_is_new":false,"ir_document_url":"","jir_ir_type":"disclosure_update","footnotes":""},"sector":[],"importance":[],"class_list":["post-139337","ir_release","type-ir_release","status-publish","hentry"],"yoast_head":"\n