PLM: Marines website breach leaks 37,070 nicknames and 11,875 email addresses
A paid Marines website breach leaked 37,070 nicknames and 11,875 emails, including former members. Names and payment data are excluded; this is separate from Arara’s breach.
Disclosed
2026-11-06
Organizations involved
7
Leaked or at risk
37.1K
37,070
Downtime
Unknown
Separate website and mailing-service attacks
On 4 November an unfamiliar page was found in the Marines website management system. Investigation confirmed unauthorized access on 30 October and downloads of files containing emails and nicknames. On 6 November the leaked scope was identified as 11,875 email addresses and 37,070 nicknames, including former members. The cohorts are not added together. Names, payment data such as cards, and club fan-membership information are excluded. [1]
Club websites entered emergency maintenance while external specialists investigate and address vulnerabilities; no restoration estimate is available. The five clubs’ email exposure through Arara announced in the same notice concerns a separate intrusion and incident. [1]
Timeline
- Started 2026-10-30
- Detected 2026-11-04
- Disclosed 2026-11-06
- 7 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak][Service outage][Site defacement]
- Entry point
- Web app
Data exposed or at risk
Supply chain
- Organizations listed on this site
- 7
Services hit
Organizations involved
[Through a supplier][Moderate]Tokyo, ShinjukuPersonal services and entertainment37,070 leaked
Chiba Lotte Marines Co., Ltd.37,070 registered nicknames and 11,875 email addresses; the overlapping cohorts are not added together.
[Breached][Moderate]Tokyo, MinatoInformation and communications37,070 leaked
Pacific League Marketing Corporation[Precautionary halt][Minor]Fukuoka, Fukuoka, ChuoPersonal services and entertainment
Fukuoka SoftBank Hawks Corp.The club’s official site is under emergency maintenance; this website intrusion is not confirmed to have exposed its own customers’ data.
[Precautionary halt][Minor]Hokkaido, KitahiroshimaPersonal services and entertainment
Hokkaido Nippon-Ham Fighters Co., Ltd.The club’s official site is under emergency maintenance; this website intrusion is not confirmed to have exposed its own customers’ data.
[Precautionary halt][Minor]Osaka, Osaka, NishiPersonal services and entertainment
Orix Baseball Club Co., Ltd.The club’s official site is under emergency maintenance; this website intrusion is not confirmed to have exposed its own customers’ data.
[Precautionary halt][Minor]Miyagi, Sendai, MiyaginoPersonal services and entertainment
Rakuten Baseball, Inc.The club’s official site is under emergency maintenance; this website intrusion is not confirmed to have exposed its own customers’ data.
[Precautionary halt][Minor]Tokyo, ToshimaPersonal services and entertainment
Seibu Lions Co., Ltd.The club’s official site is under emergency maintenance; this website intrusion is not confirmed to have exposed its own customers’ data.
Sources
- [1][Official]不正アクセスによるお客様メールアドレス等流出のお詫びとお知らせPacific League Marketing and six Pacific League clubs · 2026-11-06