Arara: unauthorized access to its Arara Message email service takes about 3.01 million email addresses

On 28 October Arara found unauthorized access to a server of its email delivery service Arara Message and cut that server off the network. It confirmed that about 3.01 million email addresses held by its corporate customers were taken from one system. The cause was an exploited vulnerability in a web server. The affected environment is suspended. Its parent Paycloud Holdings disclosed it to the Tokyo Stock Exchange on 29 October. Which customers' addresses are included has not been published.