Asoview data breach exposes 15.8 million member records

Asoview, the operator of the leisure and entertainment booking service “Asoview!”, announced on November 3 that a data breach has exposed 15,821,184 member records. The leak resulted from unauthorized access to “Arara Message,” an email delivery service provided by the Tokyo-based company Arara, which Asoview uses for outsourcing email communications.

The compromised data includes email addresses, member IDs, names, gender, dates of birth, phone numbers, postal codes, and residential regions. Notably, the breach also includes ticket purchase and usage histories, such as purchase dates, ticket types, facility names, and number of participants, which could allow for the inference of members’ behavioral patterns.

Asoview stated that no intrusion into its own internal systems was confirmed and that passwords and credit card information were not stored with Arara and therefore were not leaked. As of the announcement, no malicious use of the leaked information has been confirmed. The company has suspended all email deliveries via the service and invalidated relevant authentication credentials. Asoview is working to identify affected members to provide individual notifications and has advised all members to remain vigilant against suspicious emails, SMS, or phone calls.