Arara Message breach leaks 3.01 million email addresses
Arara said an attacker exploited a web server vulnerability to reach one server and that the full scope of the incident is still under investigation.
Arara disclosed on October 29 that unauthorized access to one server system of its email delivery service Arara Message resulted in about 3.01 million email addresses being taken out of the company, according to dailysecu.com.
Arara confirmed the unauthorized access on October 28 and immediately disconnected the affected server from the network.
Investigators determined that the attacker exploited a security vulnerability in the web server to break into the system. The company did not disclose the specific vulnerability or the attack method.
The only leaked data confirmed so far is the roughly 3.01 million email addresses, and the exact scope and any further compromise remain under investigation.
Arara said it plans to work with an external security firm to recheck vulnerabilities across its entire system and to strengthen its security measures.
Quick answers
What data was leaked in the Arara Message breach?
Arara has confirmed only that about 3.01 million email addresses were taken out of the company. The exact scope and any further compromise are still under investigation.
How did the attacker get into Arara's system?
Investigators found that the attacker exploited a security vulnerability in the web server. Arara did not disclose the specific vulnerability or the attack method.
What is Arara doing after the breach?
Arara disconnected the affected server on October 28 and plans to work with an external security firm to recheck vulnerabilities across its entire system and strengthen security measures.