Japan Crypto Exchange Zaif Loses About 380,000 Customer Email Addresses After Third-Party Service Provider Breach

November 5 — Japanese crypto exchange Zaif announced that its email service provider Arara suffered unauthorized external access, resulting in the leak of approximately 380,000 customer email addresses registered with Zaif (after deduplication). Zaif said the leaked information is limited to email addresses and does not include data such as names, transaction information, or passwords; no intrusion was found in its own systems, an account cannot be logged into with an email address alone, and no secondary harm such as asset losses has been confirmed so far.

Because Arara's services are suspended, Zaif has halted email sending and reminded customers to be wary of phishing emails impersonating Zaif or Arara, not to click links or enter authentication information, and recommends using authentication apps for two-factor authentication.