Japanese Cryptocurrency Exchange Zaif: Client Data Breach Leads to Leak of Approximately 380,000 Emails

BlockBeats news, November 5th - According to an official announcement on the website of Japanese cryptocurrency trading platform Zaif, its email distribution service contractor Arara Co., Ltd. has confirmed that customer email addresses registered with the service have been leaked due to unauthorized access to its servers. According to Arara's report, after deduplication, a total of 380,536 email addresses were leaked, containing only email addresses and no attribute information such as names or email body content.

Zaif stated that the information registered with the service was only email addresses, with no names, addresses, phone numbers, transaction information, or passwords registered, and no intrusion into the company's own systems has been confirmed. The leaked information does not contain authentication information such as passwords, and accounts cannot be logged into with email addresses alone; as of now, no secondary damage such as unauthorized logins or asset outflows resulting from this incident has been confirmed. Due to the suspension of Arara's services, Zaif has temporarily halted the distribution of various notification emails and advises users to be vigilant against phishing and spoofed emails, and not to click on unfamiliar links or submit authentication information. This is the second report following the disclosure of the potential leak on November 2nd, and the relevant situation has been reported to the competent authorities.