The Japanese cryptocurrency exchange Zaif was hacked due to a third-party service provider, resulting in the leakage of approximately 380,000 customer email addresses

The Japanese cryptocurrency exchange Zaif announced that its email service provider Arara suffered an external unauthorized access, resulting in the leak of approximately 380,000 registered customer email addresses (after deduplication).

Zaif stated that the leaked information is limited to email addresses and does not include names, transaction information, passwords, or other data. Their own system has not detected any intrusion, and accounts cannot be logged in with just the email addresses. Currently, there is no confirmation of asset damage or other secondary harm. Due to the suspension of Arara's services, Zaif has halted email sending and reminded customers to be vigilant against phishing emails impersonating them or Arara, advising not to click on links or enter authentication information, and recommending the use of authentication applications for two-factor authentication.