Cabinet Office (Japan) data breach
Cabinet Office (Japan) announced a data breach on Nov 11, 2026 affecting about 62,863 email addresses, exposing email addresses and names. It happened through a vendor (Arara (Arara Message email delivery service)). No settlement or compensation has been announced.
Was I affected?
Subscribers of 14 Cabinet Office email newsletters, including those of the Public Interest Corporation Commission and the Food Safety Commission.
| Announced | Nov 11, 2026 |
|---|---|
| Country | Japan |
| Email addresses exposed | 62,863 |
| Data exposed | Email addresses, Names and Other details |
| Through a vendor | Arara (Arara Message email delivery service) |
| Status | Confirmed by the company or a regulator filing |
What happened
Japan's Cabinet Office said on November 11, 2026 that 62,863 email addresses registered for its newsletters leaked after outsiders broke into the Arara Message email delivery service it used. Names, occupations and other details entered at sign-up may also have leaked. The 14 affected newsletters include those of the Public Interest Corporation Commission and the Food Safety Commission, and delivery has been suspended.
What should I do?
- Be wary of emails that appear to come from the Cabinet Office or its commissions, and don't open attachments or links in unexpected messages.
- Check the sender address and visit cao.go.jp directly rather than following links.
- Expect more spam and phishing at the address you used for the newsletter, and report suspicious messages.
Check the other services you use →
Sources
- 内閣府が利用するメール配信サービスにおける個人情報漏えい及びメールマガジンの配信停止について (Personal data leak at the Cabinet Office's email delivery service) · Cabinet Office, Government of Japan (in Japanese) · official
- 内閣府でメアド6万件漏えい 配信サービスに不正アクセス · Jiji Press (in Japanese) · news
- 内閣府メルマガ利用者アドレス6万件漏えい · Kyoto Shimbun (Kyodo) (in Japanese) · news