{"id":"CMP-202611-mhptwc","kind":"campaign","aliases":[],"related":[],"title":"Sega's arcade network ALL.Net and Aime card servers breached; online arcade play, Aime, PrizeON and new SEGA ID sign-ups suspended since 1 Nov 2026","description":null,"summary":"SEGA FAVE (Sega's arcade business) said on 2 Nov 2026 that a third party got into internal servers behind ALL.Net, its arcade game network, and the Aime player card service. It shut down ALL.Net and Aime services at 15:00 JST on 1 Nov 2026 to investigate. Down: online play for ALL.Net titles (including Bandai Namco Experience titles on ALL.Net), arcade location info on official sites, .NET services, Aime and PrizeON play, SEGA Lucky Kuji Online and new SEGA ID registrations. Sega says the initial investigation found no theft of customer or business partner data, and card payment data is held elsewhere and was not affected. The investigation is ongoing. How the attackers got in, who they are and when service comes back are unknown.","severity":"medium","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"SEGA ALL.Net","fixed":[],"vendor":"SEGA FAVE","ecosystem":"saas"},{"name":"SEGA Aime","fixed":[],"vendor":"SEGA FAVE","ecosystem":"saas"}],"ecosystems":[],"tags":["campaign","early-warning"],"not_affected_if":[],"how_to_check":"You are affected if you run arcade machines on ALL.Net, or play with an Aime card or SEGA ID. Check sega.jp/arcade and the official sites of each title for service status. Sega says it has not asked customers to change passwords, so treat any email or message that claims to be from Sega about this incident and asks for a login, a password change or payment as possible phishing until you confirm it on segafave.co.jp. Indicators: unknown.","fix":"Arcade operators: expect ALL.Net titles to stay offline until Sega announces a restart on segafave.co.jp, and follow Sega AM user support (sega.jp/contact/arcade). Players: change the password if you reuse your SEGA ID password elsewhere, and watch for Sega-themed phishing. No patch or customer action has been published.","status":"open","published_at":null,"first_seen_at":"2026-11-05T17:55:34+00:00","triaged_at":"2026-11-05T17:55:34+00:00","updated_at":"2026-11-05T17:56:41+00:00","category":"vendor","confidence":null,"triage":null,"analyst_status":"done","analyst_note":null,"search":"'-202611':29A '00':82B '1':25A,85B '15':81B '2':50B '2026':27A,52B,87B 'affect':148B 'aim':7A,14A,69B,78B,111B 'aime':37A 'all.net':5A,32A,35A,62B,76B,94B,102B 'arcad':3A,12A,46B,64B,103B 'attack':155B 'back':165B 'bandai':97B 'behind':61B 'breach':10A,33A 'busi':47B,135B 'campaign':38B 'card':8A,71B,139B 'cmp':28A 'come':164B 'custom':133B 'data':137B,141B 'earli':40B 'early-warn':39B 'elsewher':144B 'experi':99B 'fave':43B 'found':129B 'game':65B 'got':57B,156B 'held':143B 'id':19A,122B 'includ':96B 'info':105B 'initi':127B 'intern':59B 'investig':89B,128B,150B 'jst':83B 'kuji':117B 'locat':104B 'lucki':116B 'mhptwc':30A 'namco':98B 'net':109B 'network':4A,66B 'new':17A,120B 'nov':26A,51B,86B 'offici':107B 'ongo':152B 'onlin':11A,91B,118B 'parti':56B 'partner':136B 'payment':140B 'play':13A,92B,114B 'player':70B 'prizeon':15A,113B 'registr':123B 'said':48B 'say':125B 'sega':1A,18A,31A,34A,36A,42B,44B,115B,121B,124B 'server':9A,60B 'servic':72B,79B,110B,163B 'shut':74B 'sign':21A 'sign-up':20A 'sinc':24A 'site':108B 'suspend':23A 'theft':131B 'third':55B 'titl':95B,100B 'unknown':167B 'up':22A 'warn':41B","nicknames":["Sega ALL.Net breach"],"mitigations":[],"who_affected":null,"tier":"A","verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":["aime","allnet","segaaime","segaallnet","segaallnetbreach"],"ptokens":["aime","all","net","sega"],"labels":["campaign","earlywarning","medium","vendor"],"campaign_type":"breach","first_public_at":"2026-11-02T00:00:00+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"analyst","external_id":"CMP-202611-mhptwc","url":"https://www.segafave.co.jp/news/261102_1/","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-11-05T17:55:34+00:00","fetched_at":"2026-11-05T17:55:34+00:00","note":null,"cites":["https://www.segafave.co.jp/news/261102_1/"]}],"documents":[{"id":78410,"url":"https://www.segafave.co.jp/news/261102_1/","title":"SEGA FAVE: unauthorized access to servers (ALL.Net and Aime)","kind":"vendor","source":"analyst","publisher":null,"text":"SEGA FAVE CORPORATION announces that internal servers associated with ALL.Net (arcade game network service) and Aime were accessed without authorization by a third party. Investigating whether data was exfiltrated. Services related to ALL.Net and Aime suspended since 15:00 JST on 1 Nov 2026. Initial investigation: no exfiltration of customer or business partner information identified; payment info including credit cards is held separately and not affected. Suspended (as of 2 Nov 18:00 JST): online play for ALL.Net titles, arcade location info on official sites, .NET services for ALL.Net titles, Aime play, PrizeON play, SEGA Lucky Kuji Online, new SEGA ID registrations. Bandai Namco Experience ALL.Net titles also affected. Contact: https://sega.jp/contact/arcade/","published_at":"2026-11-02T00:00:00+00:00","relation":"describes","confidence":null,"note":null},{"id":78348,"url":"https://bsky.app/profile/campuscodi.risky.biz/post/3mzlfteabpk2n","title":"@campuscodi.risky.biz: Japanese gaming company Sega has temporarily suspended its arcade game network a","kind":"post","source":"bluesky","publisher":null,"text":"Japanese gaming company Sega has temporarily suspended its arcade game network after a cyberattack this week.\n\nThe hack impacted the Sega ALL.Net and Aime networks.\n\nwww.segafave.co.jp/news/261102_1/\nhttps://www.segafave.co.jp/news/261102_1/\n\nlikes 5 reposts 2","published_at":"2026-11-05T17:37:21+00:00","relation":"describes","confidence":null,"note":null}],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}