JP — ITmedia

Sega Faave Hit by Unauthorized Access, Arcade Services Suspended; Bandai Namco's Taiko no Tatsujin Also Affected

SecurityNovember 4, 20261 min read

Sega Fave, a Sega Sammy group company, says some of its servers were hit by unauthorized access. The attack has stopped several online game services at arcades, including Bandai Namco's Taiko no Tatsujin.

What happened

On November 2, 2026, Sega Fave said some of its servers had been accessed by an outside party without permission. The company stopped related services from 3 p.m. on November 1. Some arcade online services and new SEGA ID sign-ups are not working. The problems were still going on at 1 p.m. on November 4.

Key facts

Access was stopped from 3 p.m. on November 1, 2026.
ALL.Net games cannot be played online. Arcade stores also cannot show machine info on the official site.
Aime (the ID card system), PrizeON (the smartphone service), Sega Lucky Lottery Online, and new SEGA ID sign-ups are also stopped.
Bandai Namco Experience says 8 of its titles are affected, including Taiko no Tatsujin and Mario Kart Arcade GP DX.
For Taiko no Tatsujin and Mario Kart, some machines will stop working offline too, one after another.

Some context

ALL.Net connects arcade game machines to a network. Aime uses IC cards to tell players apart and keep their play data. Because many arcades share these systems, one problem can affect games made by other companies, like Bandai Namco's titles.

Why it matters

Players may not be able to use their accounts or play their favorite games for an unknown time. Sega Fave says that, so far, it has not found any leak of customer or business partner information. Its investigation is still going on, and it will take some time to finish.

What to watch

Whether Sega Fave finds any leak of customer or business information.
When services will restart. Sega Fave says it will announce this on its official site once checks are done.
Whether Bandai Namco's offline games return to normal.

Glossary

ALL.Net: A network that connects arcade game machines so they can play online.
Aime: A player ID system that uses IC cards to save play data at arcades.
SEGA ID: Sega's account system used to sign up and log in to its services.
Sega Fave: A Sega Sammy group company based in Shinagawa, Tokyo, that runs arcade-related services.
Taiko no Tatsujin: A rhythm game from Bandai Namco where players hit drums to the music.
unauthorized access: When someone gets into a computer system without permission, often to steal or damage data.

Denny's App Hit by Unauthorized Access; Fraudulent Credentials Created During Legacy App Migration, Possible Personal Data Leak

Denny's Japan announced on November 3 that its app, which manages coupons and points for its restaurants, was accessed by a third party and that some users' personal data may have leaked. During a system process to migrate from the old app to the new one, unauthorized credentials were created, giving access to some users' accounts; the number of affected people is still under investigation. The company says it does not hold names, addresses, phone numbers, passwords, or credit card information.

Securityheise onlineNov 4

Sabotage of Cooling Systems: Expert Criticizes Manufacturers

After cyberattacks on supermarket refrigeration systems in several European countries, including Germany, IT security expert Christoph Fischer of Karlsruhe places primary responsibility on manufacturers of networked devices, calling the delivery of control systems with unchanged factory settings and default passwords "completely unforgivable." He says manufacturers should configure systems so that individual passwords must be set at first commissioning, and that secure remote access via certificates and asymmetric encryption is technically feasible. Fischer also warned against limiting the problem to grocery retail and urged that verification of IT security be added as a criterion in consumer tests.

Security전자신문Nov 4

China-linked hackers launch AI-driven attacks on over 200 organizations worldwide, targeting US chip and defense firms

According to CrowdStrike's threat analysis report, the China-linked hacking group "VAPOR PANDA" carried out AI-based cyberattacks against at least 14 countries over 11 days starting on the 17th of last month. The attacks used the Chinese large language model DeepSeek and the AI-based intrusion tool "ARTEX," which was originally an open-source penetration testing tool that attackers have misused. Targets included US pharmaceutical, chip, defense, nuclear and financial firms, as well as telecom operators in the US, Belgium and the Philippines.

SecurityITmediaNov 4

Up to 77 Million Email Addresses Possibly Leaked in Arara Message Breach; Attackers Breached Client Company Servers

Paycloud Holdings said on November 2 that about 77 million email addresses may have been leaked or exposed in the unauthorized access to its subsidiary Arara's email delivery service "Arara Message," with up to about 380 contracted companies affected. Attackers reportedly entered contracted companies' systems via Arara Message servers between October 28 and 31, taking data from 97 servers, and were also found to have sent up to about 7.13 million phishing emails impersonating credit card companies. The service has been fully suspended since October 31, with no restart date set.