Breaches and incidentsBriefReported by a reputable outlet, citing the company
Arcadia SpeeCAN RAIDEN (Japan): disaster-alert platform used by municipalities breached, up to 3.14 million email addresses
Arcadia’s cloud mass-notification service for disaster information (875 contracts, used by municipalities, companies and organisations) was accessed...
- Disclosed
What happened
- Arcadia’s cloud mass-notification service for disaster information (875 contracts, used by municipalities, companies and organisations) was accessed without authorisation; suspicious activity was detected on 11 Oct. Up to about 3.136 million email addresses, 105,000 phone numbers and 15,000 fax numbers may have leaked. Access traces were also found in NET119 (about 13,000 records with names, birthdates and addresses) and 119RAIDEN. Many municipalities paused alert distribution.
- Root cause: Arcadia said it identified the intrusion route but the detail was not in the reports checked. Secondary Japanese reports say attackers obtained configuration files and secret keys and sent mail through a backdoor before it was blocked; not confirmed here from Arcadia’s own notice.
- Attacker: not identified.
- Response: intrusion path closed on 12 Oct, servers shut down 13 Oct and restored 15 Oct; all users told to change passwords, enable 2FA.
Sources
- https://internet.watch.impress.co.jp/docs/news/2148769.html
- https://scan.netsecurity.ne.jp/article/2026/10/16/56481.html
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.