SEGA newsletter data breach exposes 2.2 million email addresses

Japanese gaming giant SEGA has disclosed that a data breach at its third-party newsletter provider, ARARA, exposed the email addresses of 2.2 million newsletter subscribers.

The company says the exposed data also includes 92,300 records with additional information yet to be determined. The breach affects 11 newsletters linked to SEGA and SEGA Fave products and services.

The investigation found that the compromised data did not include customer names, dates of birth, gender, addresses, phone numbers, credit card details, or account passwords.

Also, email addresses registered with a “SEGA Account” are handled by a separate distribution system and were not affected by this incident.

The company is working with ARARA to determine what data was exposed and says it has no confirmed evidence of misuse.