Teollimi

Asoview data breach

Asoview announced a data breach on Nov 3, 2026 involving up to 15.8 million records (duplicates possible), exposing email addresses, names, dates of birth and phone numbers. It happened through a vendor (Arara (email delivery service)). No settlement or compensation has been announced.

Was I affected?

Asoview! members whose details Asoview passed to Arara to send them emails. Asoview says it emailed everyone affected by November 5, 2026.

Asoview breach facts
AnnouncedNov 3, 2026
When it happenedIntrusion at email vendor Arara; Arara told Asoview on November 2, 2026 that data it held for Asoview was included
CountryJapan
Records exposed (may include duplicates)15.8 million
Data exposedEmail addresses, Names, Dates of birth, Phone numbers and Other details
Through a vendorArara (email delivery service)
StatusConfirmed by the company or a regulator filing

What happened

Japanese leisure booking service Asoview said on November 3, 2026 that 15,821,184 member records leaked after an outsider broke into "Arara Message", the email delivery service run by Arara that Asoview used to send emails to members of its Asoview! service. The records include email addresses, names, gender, dates of birth, phone numbers, postal codes and area of residence, member IDs, sign-up and last-login dates, and ticket purchase and use details such as the facility, date and number of people. Passwords and card data were not held by Arara and were not part of the leak. Asoview stopped all emails on November 2, said it had emailed every affected person by November 5, and had seen no misuse.

What should I do?

  1. Be wary of emails, texts or calls claiming to come from Asoview or Arara, especially about refunds, cancellations, prize wins or identity checks, and don't open their links.
  2. Scammers may know which facility you booked and when; check any booking question in the official Asoview! app or site instead of replying.
  3. Never enter card details or passwords on a page reached from such a message; if you already did, call your card issuer.
  4. Consider filtering or changing the email address you used for Asoview! if scam emails increase.

How Korea fines a breach this size

For comparison, Korea's privacy regulator fined SK Telecom ₩134.8 billion (about US$90M) in August 2025 over a breach of 23.24 million people. Korean law fines the security failure itself, not only misuse of the data.

Data breach fines: Korea vs Japan, the US and Australia →

Know someone who uses Asoview? Share this

More data breaches in Japan →

Check the other services you use →

Sources