FinnoValley data breach
FinnoValley announced a data breach on Nov 4, 2026 affecting about 594,799 email addresses, exposing email addresses. It happened through a vendor (Arara (email delivery service)). No settlement or compensation has been announced.
Was I affected?
Users of local currency apps built on FinnoValley's MoneyEasy platform that sent emails through Arara. FinnoValley is still working out which apps and users are affected.
| Announced | Nov 4, 2026 |
|---|---|
| When it happened | Intrusion at email vendor Arara; Arara first told FinnoValley on October 28, 2026 and gave the count on November 2 |
| Country | Japan |
| Email addresses exposed | 594,799 |
| Data exposed | Email addresses |
| Through a vendor | Arara (email delivery service) |
| Status | Confirmed by the company or a regulator filing |
What happened
FinnoValley, which provides the MoneyEasy platform behind many Japanese digital local currency apps, said on November 4, 2026 that 594,799 email addresses leaked after an outsider broke into the email delivery service of Arara, its email contractor, and issued a second notice on November 6. The figure covers FinnoValley's whole environment on Arara and is neither a per-app count nor a number of users. Email contents, and any addresses or phone numbers written in them, were not taken. FinnoValley switched to another email service between October 30 and November 1.
What should I do?
- Be wary of emails claiming to come from your local currency app, FinnoValley or Arara, and don't open their links or attachments.
- Never enter your ID, password, verification code or card details from an email link.
- If you did, contact the app's operator or your card issuer.
Check the other services you use →