SEGA FAVE: email accounts accessed; partner, staff and customer data may have leaked

On 24 April 2024 SEGA FAVE in Shinagawa, Tokyo, part of SEGA SAMMY Holdings, announced that some email accounts used by its Toys Company had been accessed without authorization and that personal data may have leaked. SEGA SAMMY Holdings, which manages the email system's security, detected the access on 4 April. Affected are about 1,900 records of business partners (including bank account data) and about 300 of employees, their families and group employees, plus about 2,540 records of guests, golf customers, partners and employees of Phoenix Resort, where the account holder used to work. A follow-up on 13 May found three more accessed accounts, adding 10,100 applicants for baking classes at "Uncle Jam's Bakery" Yokohama and 48 people who had contacted the former SEGA TOYS customer centre. The investigation is complete; no card data is involved.