SEGA says a cyberattack on a third-party newsletter provider, ARARA, has exposed the email addresses of about 2.2 million people who subscribed to Sega newsletters. The company and ARARA are investigating how the breach happened and what information was accessed.

Sega and the provider have told subscribers to watch for suspicious emails and possible phishing attempts. One outlet reports that Sega says its customer accounts used for in-game rewards and access to a calendar feature are not affected.

Across the coverage, the core facts are consistent: the incident involves a vendor supplying newsletter delivery rather than Sega’s own systems, and the leaked data is described as email addresses. The main differences are the emphasis on whether Sega accounts were impacted and the specific consumer features referenced in the reporting.