Hotelovers data breach
Hotelovers announced a data breach on Nov 6, 2026 affecting about 1.6 million email addresses, exposing email addresses. It happened through a vendor (Arara (email delivery service)). No settlement or compensation has been announced.
Was I affected?
Hotelovers customers whose email addresses were used for the store's marketing emails. The store plans to email those affected.
| Announced | Nov 6, 2026 |
|---|---|
| When it happened | Intrusion at email vendor Arara, used through GMO Commerce's GMO Marketing Connect; reported to Hotelovers on November 5, 2026 |
| Country | Japan |
| Email addresses exposed | 1.6 million |
| Data exposed | Email addresses |
| Through a vendor | Arara (email delivery service) |
| Status | Confirmed by the company or a regulator filing |
What happened
Hotelovers, a Japanese online store for colored contact lenses, said on November 6, 2026 that 1,578,779 email addresses (as of November 5) leaked after an outsider broke into Arara's email delivery platform, which Hotelovers used through GMO Commerce's GMO Marketing Connect service. Only email addresses were taken; names, home addresses, phone numbers, login passwords and card data were not. The count is of addresses, not customers, and Hotelovers plans to email affected customers individually.
What should I do?
- Be wary of emails claiming to come from Hotelovers or Arara, and don't open their links or attachments.
- Hotelovers says it will never ask for passwords or card details by email; ignore messages that do.
- Consider filtering or changing the email address you used for the store if scam emails increase.
Check the other services you use →
Sources
- メール配信サービスへの不正アクセスによるメールアドレス流出に関するお詫びとお知らせ (Apology and notice about an email address leak caused by unauthorized access at an email delivery service) · Hotelovers (in Japanese) · official