Three million was another mail room

Three million is a destination list on one mail product.

Arara said today that it found unauthorized access on 28 October against part of Arara Message, cut the server, and later confirmed that about 3.01 million email addresses belonging to the companies that use that environment had been taken out. Cause, as of the letter: a web-server vulnerability on one of its environments. It has not named the tenants. It has not named names behind the addresses. The service is stopped.

This is the same shape as the Blastmail contracts and the Cuenote rooms. A vendor that sends other people’s mail. A list that was never supposed to leave the sender. Do not add 3.01 million to Blastmail’s 344 contracts, or to Ymil’s nine-million estimate, or to JR’s 170,000. Different vendors. Different files.

They have told the companies. They have asked anyone who gets a strange mail not to open the link. They have not confirmed secondary use.

What 3.01 million will be asked to cover

It will be briefed as every Japanese inbox, and as another nine million. It is one Arara Message environment. The 3.01 million is addresses the tenants held, not Arara’s own staff book. A still-dark product page is evidence about today’s queue. It is not a finding that the list came back.

If a company mailed you through Arara Message, the address is the incident. A mail that already knows you were on that list and asks for a password is not their letter. They do not have one in this file.

Three million is another mail room. Keep it off the Blastmail sentence.