Asoview data breach
Asoview announced a data breach on Nov 3, 2026 involving up to 15.8 million records (duplicates possible), exposing email addresses, names, dates of birth and phone numbers. It happened through a vendor (Arara (email delivery service)). No settlement or compensation has been announced.
Was I affected?
Asoview! members whose details Asoview passed to Arara to send them emails. Asoview says it emailed everyone affected by November 5, 2026.
| Announced | Nov 3, 2026 |
|---|---|
| When it happened | Intrusion at email vendor Arara; Arara told Asoview on November 2, 2026 that data it held for Asoview was included |
| Country | Japan |
| Records exposed (may include duplicates) | 15.8 million |
| Data exposed | Email addresses, Names, Dates of birth, Phone numbers and Other details |
| Through a vendor | Arara (email delivery service) |
| Status | Confirmed by the company or a regulator filing |
What happened
Japanese leisure booking service Asoview said on November 3, 2026 that 15,821,184 member records leaked after an outsider broke into "Arara Message", the email delivery service run by Arara that Asoview used to send emails to members of its Asoview! service. The records include email addresses, names, gender, dates of birth, phone numbers, postal codes and area of residence, member IDs, sign-up and last-login dates, and ticket purchase and use details such as the facility, date and number of people. Passwords and card data were not held by Arara and were not part of the leak. Asoview stopped all emails on November 2, said it had emailed every affected person by November 5, and had seen no misuse.
What should I do?
- Be wary of emails, texts or calls claiming to come from Asoview or Arara, especially about refunds, cancellations, prize wins or identity checks, and don't open their links.
- Scammers may know which facility you booked and when; check any booking question in the official Asoview! app or site instead of replying.
- Never enter card details or passwords on a page reached from such a message; if you already did, call your card issuer.
- Consider filtering or changing the email address you used for Asoview! if scam emails increase.
How Korea fines a breach this size
For comparison, Korea's privacy regulator fined SK Telecom ₩134.8 billion (about US$90M) in August 2025 over a breach of 23.24 million people. Korean law fines the security failure itself, not only misuse of the data.
Check the other services you use →
Sources
- 委託先メール配信サービスへの不正アクセスに関するお詫びとお知らせ (Apology and notice about unauthorized access at our email delivery contractor) · Asoview (in Japanese) · official
- アソビュー、会員情報1582万件流出 最終ログイン日や利用施設も メール委託先・アララ不正アクセスで · ITmedia NEWS (in Japanese) · news