Japanese exchange Zaif reports 380,000 customer email addresses leaked due to third-party breach.

According to Huoxing Finance, Japanese cryptocurrency exchange Zaif issued a notice stating that its email service provider, Arara, suffered an unauthorized external access, resulting in the exposure of approximately 380,000 registered customer email addresses (after deduplication). Zaif clarified that the leaked information is limited to email addresses only and does not include names, transaction details, passwords, or other data; no intrusion into Zaif’s own systems was detected, and accounts cannot be accessed using email addresses alone. No secondary damages, such as asset losses, have been confirmed. Due to the suspension of Arara’s services, Zaif has halted all email communications and advised customers to remain vigilant against phishing emails impersonating Zaif or Arara, urging them not to click on links or enter authentication information. Zaif recommends switching to authentication apps for two-factor authentication.