Duskin data breach
Duskin announced a data breach on Nov 4, 2026 affecting about 657,886 email addresses, exposing email addresses. It happened through a vendor (Arara (email delivery service)). No settlement or compensation has been announced.
Was I affected?
Members of Duskin's DDuet household member site and some people who registered an email address on other Duskin sites, excluding its food business.
| Announced | Nov 4, 2026 |
|---|---|
| When it happened | Intrusion at email vendor Arara (its repica service); Arara reported the leak to Duskin on November 2, 2026 |
| Country | Japan |
| Email addresses exposed | 657,886 |
| Data exposed | Email addresses |
| Through a vendor | Arara (email delivery service) |
| Status | Confirmed by the company or a regulator filing |
What happened
Duskin, the Japanese cleaning products rental and home services company, said on November 4, 2026 that 657,886 email addresses leaked after an outsider broke into repica, an email delivery service run by Arara. Most belong to members of DDuet, Duskin's member site for household customers, and some to people who registered on other Duskin sites outside its food business. Names, home addresses and card data were not involved.
What should I do?
- Be wary of emails claiming to come from Duskin or Arara, and don't open their links or attachments.
- Don't enter card details for emails about deliveries or payments; check on the official DDuet site instead.
- Consider tightening spam filtering on the address you registered if scam emails increase.
Check the other services you use →
Sources
- メール配信サービス提供事業者への不正アクセスによるお客様メールアドレス漏洩に関するお知らせとお詫び (Notice and apology about the leak of customers' email addresses caused by unauthorized access at an email delivery service provider) · Duskin (in Japanese) · official
- モスやワークマン、IIJmioも アララへの不正アクセスで顧客情報の流出発表相次ぐ · ITmedia NEWS (in Japanese) · news