Zaif: Third-party service provider breached; more than 380,000 customer email addresses leaked

深潮 TechFlow reported on November 5 that, according to an official Zaif announcement, Arara, the email service provider for Japanese crypto exchange Zaif, was subjected to unauthorized access, resulting in the leakage of 380,536 customer email addresses registered with Zaif, with the count deduplicated. Zaif received the list of leaked addresses on November 4, which may include addresses registered in the past, and the number of affected current users is still being verified.

Zaif said the only information registered with the service provider was email addresses, excluding names, transaction information, passwords, and similar data; no intrusion was detected in its own systems, and no related unauthorized logins or asset outflows have been identified so far. Due to the service provider's suspension, Zaif has temporarily halted sending notification emails. Once service resumes, it will contact affected customers individually and remind users to be cautious of phishing emails.

Source: 深潮 TechFlow