Weekend investigation overturned the earlier single-environment assessment: Arara Message was used to reach 97 client servers, remove customer data and send millions of phishing emails before the service was fully stopped.
What changed
Arara Message's incident expanded over the weekend from one shared system to client environments spanning 97 servers and an estimated maximum of about 380 companies. The provider also confirmed large-scale phishing through its infrastructure and stopped the entire service.
Public record through 2026-11-02. Source references count citations across published briefings, including repeated sources. Explore the record and its limits →
What We Publish / What We Sell
D
Free · Public
The Daily
Five evidence-backed selections for security leaders, every weekday.
Scores run from 0 to 100 and assess affected dependency breadth, required decision speed and credible data-loss, fraud and continuity consequences. Exposure: 95. Urgency: 98. Business consequence: 92. Focus the chart and use the up and down arrow keys for detail. Source: Security.io editorial scoring based on selected primary evidence; these values are editorial assessments, not source metrics.