SEGA arcade network services suspended after server breach
SEGA FAVE has suspended ALL.Net and Aime services while it investigates unauthorised access to servers linked to its Japanese arcade network.
SEGA FAVE says it has suspended parts of its arcade network after discovering that a third party accessed certain internal servers connected to ALL.Net and Aime. The company announced the incident on 2 November, saying services had been stopped from 3 p.m. JST on 1 November while it investigates possible data exfiltration and checks the safety of its systems.1
The affected services include online play for ALL.Net-supported arcade titles, Aime gameplay, related .NET services, PrizeON gameplay, SEGA Lucky Kuji Online and new SEGA ID registrations. Players may also be unable to view arcade location information on the official websites for ALL.Net-supported games.1
SEGA FAVE says its initial investigation has not identified data exfiltration involving customers or business partners. It also says payment information, including credit-card data, is held separately and was not stored on the affected servers. Those are preliminary findings rather than a final incident report, and the company has not announced a restoration date.1
The notice covers SEGA FAVE's arcade network services in Japan, so the practical impact depends on the title, venue and service being used. ALL.Net supports online features across a broad range of arcade games, while Aime is used for player accounts and gameplay-related functions. The company directs users to the relevant title websites for service-specific updates.1
For readers outside Japan, this is primarily a disruption to arcade-linked online functions rather than a confirmed compromise of payment data. The distinction matters: SEGA FAVE has reported unauthorised access, but it has not said that customer information was stolen. That position could change if the continuing investigation finds further evidence.1
Our opinion
SEGA FAVE's cautious shutdown is the right call while it establishes what was accessed, but the lack of a timetable will be frustrating for arcade operators and players who rely on persistent accounts. The useful next update will be less about reassurance and more about scope: which services are safe to restore, whether any accounts need action, and whether the preliminary no-exfiltration finding survives a full forensic review.