Sega's ALL.Net Breach Leaves Taiko, Initial D and Mario Kart Arcade Cabinets Unplayable in Japan
By CriticalPixel ·
Sunday afternoon is when Japanese arcades make their money, and this week a lot of cabinets just sat there with staff apologizing to nobody in particular. Sega Fave, the Sega subsidiary that runs the company's arcade business, cut ALL.Net and Aime at 3 p.m. JST on November 1 after a third party accessed its servers without authorization. Online play, player cards, leaderboards, store locators and even new SEGA ID signups went dark nationwide in one move. By the time Monday rolled around, the machines were still down and Sega had no date for bringing them back. This is the second time in a week the same network has fallen over.
What ALL.Net and Aime Actually Do
For anyone who has never fed coins into a Japanese cabinet, ALL.Net is the plumbing. It is the online network that lets machines pull down matchmaking, leaderboards, saved progress and event data, and it is the reason a rhythm game cabinet in Osaka knows what a player did in Tokyo last night. Aime is the NFC card layer on top, the tap to save system that holds your profile, scores and unlocks. Kill both and a modern arcade game turns into an expensive box with a nice screen. Sega Fave's notice confirms the affected servers are the ones tied to ALL.Net and Aime, and that the shutdown started at 15:00 on November 1 while the company verifies safety.
The Damage List Is Bigger Than Sega
Bandai Namco Experience licenses the same infrastructure, so its cabinets went down with Sega's. The company published its own notice naming eight affected titles: Taiko no Tatsujin, Mobile Suit Gundam Extreme Versus 2 Infinite Boost, Mario Kart Arcade GP DX, The Idolmaster TOURS, JoJo's Bizarre Adventure Last Survivor, Fishing Spirits Wonder, Wangan Midnight Maximum Tune 6RR PLUS and Gundam Arsenal Base. That is a brutal cross section of what people actually play in Japanese arcades, from the drum game every kid knows to the four player racing cabinets that anchor a Friday night. Sega's own side includes Initial D The Arcade and the maimai series, which is a lot of rhythm game hardware sitting idle.
No Data Leak Confirmed, and That Is Doing a Lot of Work
SEGA Fave says its initial investigation has not found exfiltration of customer or business partner data, and that payment information including credit card numbers lives on separate servers the intruders did not touch. That is the good news, and it is also a claim made two days into an investigation the company says will take a while. Arcade accounts are not bank accounts, but an Aime card is tied to a profile with purchase history and play data, so players are right to want the full report rather than a reassurance. Nobody has said how the access happened, what was touched, or whether the attackers were inside for hours or weeks.
A Second Outage in the Same Week
The timing is what makes this look bad. Kotaku reports that the same ALL.Net service went offline for several days at the end of October to deal with a PHP exploit, and that Sega reopened it with access limited to Japan, which left overseas players fuming. Less than a week later the network is down again, this time because of unauthorized access rather than maintenance. Either the original fix was incomplete or the surface is bigger than Sega Fave thought, and both answers are worse than a routine maintenance window. Arcade operators are now eating the cost of dead cabinets during one of the busiest stretches of the year.
What Players Actually Lose
The obvious loss is the game itself, but the quieter one is progress. Aime carries rating, unlocks and event participation, so a week offline can mean missed limited events and expired login bonuses that arcade players plan around. Games that still boot in offline mode often run a stripped version without the modes that make them worth the trip. Venues cannot comp that back, and Sega has not said whether missed events will be extended. For a rhythm game community that treats a weekly credit count like a training log, that stings more than the downtime.
What the Arcades Are Doing
Operators are handling it the only way they can, with signs. Round One's Handa location posted a notice that some machines are unavailable and listed the suspended services, and other venues have done the same. Some arcades flipped cabinets into offline modes or ran casual event brackets so people could still play something, which is a decent save for a scene that lives on weekly routine. Players are less patient. Japanese posts have pointed out that the outage swallowed a Sunday and a public holiday, and that the same players who got locked out of overseas access last week are locked out again. Automaton notes the suspension covers online play, location searches, PrizeON, Lucky Kuji Online and new account registrations, so there is no small corner of the service still working.
CriticalPixel Take
Sega deserves credit for fast disclosure and for being clear that card data was not on those servers, but the arcade side of the business keeps getting treated like a legacy afterthought until it breaks. A service that powers Taiko, Mario Kart and every maimai cabinet in the country should not be the weakest link twice in seven days, and the international lockout after the first incident already showed how quickly the company reaches for a wall instead of a fix. Rhythm game players are the most loyal customers Sega has, the ones who show up weekly, buy cards and grind scores for years, and right now their progress is hostage to an investigation with no timeline. Restore the network, publish what happened, and stop making arcade players pay for infrastructure decisions they never got a vote on. Until then the cabinets stay dark and the apology signs stay taped to the glass.
Bottom Line
As of November 3, Sega Fave's news page still carries only the November 2 notice, with no update on when ALL.Net and Aime come back. If you are in Japan and planning a trip to an arcade this week, check the venue's socials before you go, because a lot of machines that need a card tap are simply not running.
Sources
Kotaku: Japanese Arcade Machines Taken Down by a Major Hack of Sega Services
SEGA Fave: Notice of Unauthorized Access to Company Servers
Automaton West: Sega Arcade Network Services Down After Subsidiary Server Breach
Bandai Namco Experience: Notice of ALL.Net and Aime Service Suspension
SEGA Arcade Products: Current ALL.Net Title Lineup
SEGA Arcade: maimai Deluxe MAGiCAL Product Page
SEGA Arcade: CHUNITHM Mate Product Page
Initial D THE ARCADE Official Site