13,000+ Email Addresses Leaked from 5 Pacific League Teams — 5ch Asks: ‘Why Was Orix the Only One Untouched?’

From our other sites

The story

It was announced on the 6th that the email delivery service “Arara Message,” used by five of the six Pacific League teams’ official websites managed by Pacific League Marketing (PLM) — all except Orix — suffered unauthorized access, leaking a total of over 13,000 email addresses. SoftBank reportedly had 3,660 addresses leaked, while Lotte saw 11,875 email addresses leaked along with 37,070 registered nicknames. Rather than focusing on the scale of the leak, 5ch’s reaction centered on the question “why was Orix the only one unaffected?” Commenters pointed out that Orix simply never used Arara’s service in the first place, with some crediting this to the cautious nature typical of a finance-industry parent company, while others sarcastically suggested it was simply because Orix has so few registered fans.

Email Addresses Leaked from 5 Pacific League Teams Excluding Orix — Over 13,000 in Unauthorized Access Incident – Sankei News

2026/11/6 19:09

Pacific League Marketing (PLM), a joint venture funded by all six Pacific League professional baseball teams, announced on the 6th that an email delivery service used by five of the official team websites it manages — all teams except Orix — suffered unauthorized access, resulting in the external leak of users’ email addresses. The total exceeded 13,000, including 3,660 from SoftBank.

Source: sankei.com / Original article here

What people said

2AnonymousNov 6, 2026 20:42
Why was Orix okay though?
4AnonymousNov 6, 2026 20:45
Re: #2
You know how when someone asks you to name all 6 teams in the Central or Pacific League, there's always that one team that just won't come to mind?
That was Orix.
6AnonymousNov 6, 2026 20:45
Re: #2
They're a moneylending company, after all.
They probably spend real money on that stuff.
It'd be a trust issue otherwise.
10AnonymousNov 6, 2026 20:48
Re: #2
No registered users means zero victims.
7AnonymousNov 6, 2026 20:46
SoftBank got hit too?!
They're a telecom company — isn't that embarrassing?
12AnonymousNov 6, 2026 20:50
Re: #6
All 6 teams use the same vendor, you know.
18AnonymousNov 6, 2026 20:55
Re: #12
Put another way, the real mystery is why Orix (at least as far as we know right now) was the only one left out.
25AnonymousNov 6, 2026 21:02
Re: #12
>The leak from the email delivery service (Arara Message) totals 13,711 addresses across the 5 teams. The leak from the Lotte site alone included 11,875 email addresses and 37,070 registered nicknames.

>Also note that Orix does not use Arara's service.
56AnonymousNov 6, 2026 21:42
Re: #12
What a liar.
13AnonymousNov 6, 2026 20:51
Every team leaked something, but it's only customer data — employee and player info never got out.
15AnonymousNov 6, 2026 20:52
Orix is amazing — their defense is flawless.
19AnonymousNov 6, 2026 20:55
Hacker: "Eh, I'll let Orix off the hook…"
20AnonymousNov 6, 2026 20:58
There's also a chance the hacker is an Orix fan.
21AnonymousNov 6, 2026 20:58
It's "email addy," by the way. Yoroshiku on that one (written in "yoroshiku" delinquent-slang kanji, 夜露死苦).
27AnonymousNov 6, 2026 21:04
The Bumbling Pacific League vs. the Security League (a pun on "Pa League" sounding like "baka," meaning idiot).
30AnonymousNov 6, 2026 21:09
It's because they're riding the Blue Wave. I don't recognize the Buffaloes. (Orix's team was called the BlueWave before merging into the Buffaloes.)
31AnonymousNov 6, 2026 21:09
Way too many companies just dump their online operations on Arara. No wonder this much leaked.
33AnonymousNov 6, 2026 21:09
As a Kintetsu Buffaloes fan, my security is ironclad. (The Kintetsu Buffaloes are a defunct team absorbed into Orix.)
36AnonymousNov 6, 2026 21:13
Isn't the culprit basically obvious at this point?
41AnonymousNov 6, 2026 21:22
So the culprit is Buffalo Bell? (Orix Buffaloes' mascot.)
44AnonymousNov 6, 2026 21:23
Is this actually Orix's fault here? Or is it the other teams' fault for trying to frame Orix as the culprit?
45AnonymousNov 6, 2026 21:26
Re: #1
This just exposed how few pro baseball (Pacific League) fans actually bother signing up on the official team sites.
Only 13,000 total across 5 teams?? That's insanely few lol
74AnonymousNov 6, 2026 23:14
Re: #45
Seriously lol

So few lol
77AnonymousNov 6, 2026 23:25
Re: #1 Re: #45
The guy who stole the data was probably shocked at how few registrants there were.
And among those, Orix's numbers were so pathetically low he couldn't even be bothered stealing them.
48AnonymousNov 6, 2026 21:32
Orix had the foresight not to trust Arara.
51AnonymousNov 6, 2026 21:36
Got an email from Orix.

It basically said: "Unlike the other Pacific League teams, we don't use Arara's email service, so we should be fine — but we're doing emergency maintenance just in case."
53AnonymousNov 6, 2026 21:37
Sounds like soccer fanboys (a derogatory term baseball fans use for soccer fans) are casually buying this info off the dark web.
55AnonymousNov 6, 2026 21:41
Companies that own pro baseball stadiums give off this vibe of being so internally aged that nobody there understands IT at all.
57AnonymousNov 6, 2026 21:44
Re: #55
You mean like SoftBank, DeNA, or Rakuten?
59AnonymousNov 6, 2026 21:47
Orix alone came out unscathed.
So what does that tell you?
60AnonymousNov 6, 2026 21:48
https://pbs.twimg.com/media/HWbHcCjb0AAv5GT.jpg

Didn't realize they even had a live-game-update newsletter. Sounds like an annoying amount of notifications.
62AnonymousNov 6, 2026 21:48
Why was it only Orix………
Oh!
66AnonymousNov 6, 2026 22:07
Orix fans don't exist, so there was nothing to leak.
67AnonymousNov 6, 2026 22:17
Re: #1
Only about 10,000 leaked across 5 teams, not just one? That's absurdly low, isn't it?
68AnonymousNov 6, 2026 22:23
Is this a separate thing from this SoftBank story?

SoftBank: Personal information leaked via unauthorized access to a related service
SoftBank and VOLZ Inc. announced on the 6th that due to unauthorized access to Arara Inc.'s email delivery service "Arara Message," which VOLZ used, the email addresses of some customers using SoftBank's services had been leaked.
69AnonymousNov 6, 2026 22:25
Re: #68
>> "Pacific League Marketing (PLM), the joint venture funded by the 6 Pacific League teams"
The official team sites managed by that company

Yeah, that's a different case.
76AnonymousNov 6, 2026 23:18
Too few Orix fans — maintenance wasn't even necessary.
78AnonymousNov 7, 2026 00:04
Re: #76 Re: #77
Sounds made up, but it's actually true, huh…

Background and Key Points of This Topic

The leak originated from sites managed by PLM, the operating company jointly funded by the six Pacific League teams, with the actual email delivery work outsourced to an external service called “Arara Message” run by Arara Inc. The fact that only Orix escaped damage isn’t a matter of superior security measures — it simply comes down to a contractual difference, namely that Orix didn’t use this particular service. On the thread, speculation flew that “Orix is cautious because it’s finance-industry” or “they weren’t targeted because they have few fans,” but according to the teams’ own explanation, the real reason is just a difference in vendor selection, not a sign of heightened security awareness. It’s also worth noting, to avoid confusion, that the separately announced SoftBank/VOLZ unauthorized access incident reported the same day is a distinct case that merely happens to share the same Arara service.

*This article is compiled as an excerpt/summary of the 5ch (Geinou/Sports News+) thread “[Baseball] Email Addresses Leaked from 5 Pacific League Teams Excluding Orix — Over 13,000, Due to Unauthorized Access.”

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *