Sega Fave Cyberattack Knocks Arcade Machines Offline Across Japan

Sega and Bandai Namco titles affected

Sega games such as Initial D The Arcade, maimai and CHUNITHM are hit. Because other publishers also use ALL.Net, Bandai Namco titles including Mario Kart Arcade GP DX, Taiko no Tatsujin and Mobile Suit Gundam Extreme Vs. are affected as well. For some games, even offline play stopped working. Some venues, such as WGC, switched off their Taiko no Tatsujin cabinets, and tournaments including the Initial D Double Ace Cup were cancelled.

According to Sega Fave's initial findings, no customer or partner information leaked. Payment data, including card numbers, sits on separate servers and was not touched. On 6 November the company said it was working to restore services but had no restart date. Since 8 November, eight Bandai Namco games, Mario Kart Arcade GP DX among them, have gradually come back, while Sega's titles remain offline.

A wider wave of attacks

The incident comes amid a surge of attacks in Japan. Trend Micro counted more than 600 intrusions against Japanese companies and local authorities between January and September 2026, more than in all of 2025. Victims include Lawson, Times Car and Capcom, where data from 11.7 million accounts was stolen. GMO Internet received a $50 million ransom demand.

Prime Minister Sanae Takaichi called the situation serious and promised to use "the full force of the government." The government has adopted an emergency cybersecurity plan that includes a public-private rescue team to assist companies under attack. Authorities are urging firms to patch flaws quickly, enforce two-factor authentication and tighten oversight of subcontractors, a weak link hackers exploit.