Sega breach shuts down Japan arcade machines, even offline
Sega (SEGA FAVE) confirmed an intruder accessed internal servers behind its arcade game network and the Aime card system; services were suspended at 3:00 PM JST on Nov. 1, 2026. Bandai Namco is gradually shutting down Mario Kart and Taiko no Tatsujin machines in Japan, even in offline mode, with no restart date. Sega says its initial investigation found no exfiltration of customer or partner data, a preliminary finding; operators should follow both companies' notices.
What happened
An intruder accessed internal Sega (SEGA FAVE) servers behind its arcade network and the Aime player card system. Since Nov. 1, 2026, online play, card use and new sign-ups have been suspended. Bandai Namco is shutting down Mario Kart and Taiko no Tatsujin machines in Japan, even offline, with no restart date.
Why it matters
Arcades in Japan lose online play, Aime cards, PrizeON, SEGA Lucky Kuji Online and new SEGA ID sign-ups, and machines from another publisher, Bandai Namco, also stop because they share the same network. Sega says its initial investigation found no exfiltration of customer or partner data and that payment card data sits on separate systems; the finding is preliminary.
What to do
Follow Sega and Bandai Namco notices and communicate a return date to customers. Arcade operators should plan offline operation and contingency; IT teams should review segregation between payment systems and online services.
For the technical team
- Affected
- SEGA FAVE Servidores internos ligados à rede de jogos de fliperama e ao sistema de cartões Aime da Sega; máquinas de Mario Kart e Taiko no Tatsujin (Bandai Namco) no Japão também afetadas, inclusive em modo off · Suspended services: online play for Sega network titles, Aime, PrizeON, SEGA Lucky Kuji Online and new SEGA ID sign-ups. Mario Kart and Taiko no Tatsujin machines (Bandai Namco) in Japan, even in offline mode; Bandai Namco ALL.Net-supported titles affected.
- Exploitation
- Intrusion confirmed by SEGA FAVE. No actor, ransomware claim or CVE disclosed, per DailyDarkWeb; no PoC reported.
- Fix
- No applicable fix; services suspended from 3:00 PM JST on Nov. 1, 2026 and Sega has set no restart date.
- Vector
- Unauthorized third-party access to SEGA FAVE internal servers tied to the arcade game network and the Aime card system. Vector not disclosed: no actor, ransomware claim or CVE revealed.
- More details
- Sega: initial investigation found no exfiltration of customer or partner data (preliminary) and payment card data sits on separate systems. A viral post speculates, unconfirmed, that maimai was hacked with a 'salt chart' added to the cabinet, that server PHP had not been updated since 2019, and that 60% of the code would need rewriting because of the leak.
Timeline
Bandai Namco says Mario Kart and Taiko no Tatsujin machines are being shut down in Japan, even in offline mode; Sega has set no restart date.
A viral post speculates SEGA had not updated the PHP on its servers since 2019 and that 60% of the code must be rewritten because of the leak.
Incident opened.
Sources 3 sources
- @DailyDarkWeb @DailyDarkWeb
- @IndoKnight219 @IndoKnight219
- @IntCyberDigest @IntCyberDigest
