SEGA newsletter data breach exposes 2.2 million email addresses

SEGA has disclosed that a breach at its third-party newsletter provider, ARARA, exposed the email addresses of 2.2 million newsletter subscribers across 11 SEGA and SEGA Fave newsletters, with 92,300 further records still being determined. ARARA disclosed on November 2 that its email distribution service was breached, compromising 77 million email addresses from nearly 380 corporate clients, and says attackers also used its access to send over 7 million emails impersonating credit card companies.