- Arara's November 6 count: 81,329,467 unique email addresses, a count of addresses, not people. Depending on the client company, records may also include name, gender, date of birth, phone number, member ID and address. Arara says it holds no credit card numbers.
- From October 28 to 30 the attackers sent up to about 7.13 million emails posing as credit card companies, with subjects asking you to confirm card charges or statements. Arara stopped its whole service on October 31 and has given no restart date.
- Sega said on November 9 that addresses from 11 Sega and Sega Fave newsletters sent July 2 to October 28 leaked, 92,273 of them with other mailing details. It says names, birth dates, addresses, card data and passwords were not included, SEGA Account addresses were not affected, and no misuse has been confirmed.
- Delete emails from news@arara.com and any unexpected message asking you to confirm card use; don't click their links. If you entered card details, contact your card issuer now. Arara and Sega say they never ask for passwords or card details by email.
Useful?