ENKR

Arcadia SpeeCAN RAIDEN possible data leak

Add to my breach check

Made public · 3,136,000 email addresses at most

What leaked7

Hard to replace

  • Mobile number
  • Home or delivery address
  • Email address
  • Other profile data

Permanent

  • Date of birth
  • Full name
  • Gender
  • Date of birthNET119 users only
  • Mobile numberphone and fax numbers · the notice does not say mobile or landline
  • Home or delivery addressNET119 users only
  • Email addresscontacts registered in SpeeCAN RAIDEN and Raiden School mail services; NET119: 9,020 addresses; 119RAIDEN: about 97,000
  • Full namenames of contacts
  • GenderNET119 users only
  • Other profile datacontract details and the text of messages kept in the sending history; NET119: details entered when registering for other services

To-dos4 · about 50 min in all

  1. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: scam calls, phishing messages
  2. Turn on instant transaction alertsabout 5 minHelps you notice: scam calls
  3. Remove your address and phone from public profiles and tighten SNS privacyabout 20 minfreeLimits harm from: visits or contact at home
  4. Use an authenticator app or passkey instead of SMS codesabout 20 minfreeLimits harm from: SMS code theft

What happened next13 events

  1. Undetected 2 events0 days · show events
  2. Response 11 eventsNo individual notice on record · Back to latest
  3. RemedyNone on record
  4. PenaltyNone on record
  5. DisputesNone on record

Response: 11 events

Back to latest
  1. Submitted a damage report to the Osaka Prefectural Police cybercrime division
  2. Filed a leak incident report for government-body clients
  3. Published a timeline of the attack and its response
  4. Announced that NET119 and 119RAIDEN data may also have leaked
  5. Detected unauthorised email sending by a malicious program; 1,423,428 messages counted so far
6 more
  1. Consulted the police
  2. Stopped the two servers that were the way in (raiden3 and s2) as an emergency measure
  3. Announced a possible leak of SpeeCAN RAIDEN data
  4. Sent a preliminary report to the Personal Information Protection Commission
  5. Closed the intrusion path and fixed the file-server flaw
  6. Reported to PrivacyMark · JIPDEC, the MIC Kinki Bureau of Telecommunications and its ISMS certification body · JMA
Company
Arcadia Inc.
When it happened
Company detected it
Made public
Notice
Possible leak
Affected
3,136,000 email addresses at most · estimate; plus about 105,000 phone and 15,000 fax numbers in SpeeCAN RAIDEN, and NET119 and 119RAIDEN data

How the facts developed

  1. NET119 and 119RAIDEN found affected too; NET119 data includes date of birth, gender and address (9,020 email addresses, fixed on October 16, 2026)
  2. First notice: SpeeCAN RAIDEN data possibly leaked, up to about 3,136,000 email addresses (estimate)

Sources