Online features for a substantial number of Japanese arcade games were forced offline after unauthorized access affected Sega’s ALL.net and Aime networks. The disruption hit rhythm, racing and idol franchises, while arcade operators limited some machines to offline play.
Sega Fave, the Sega subsidiary responsible for the services, is investigating the breach. As of November 1 at 3 p.m. Local time in Japan, every service involving the two networks had been affected. Sega’s November 2 update said the investigation would take some time, with no clear restoration date.
What happened:
- ALL.net connects Japanese arcade cabinets to the internet for matches, leaderboards and save sharing.
- Aime stores player information on NFC cards that can be read by compatible machines.
- Affected services include those used by Taiko no Tatsujin, Initial D: The Arcade and Idolmaster TOURS.
- Sega said no customer or business-partner data was breached and that payment information was not stored on the affected servers.
- Some arcades are offering offline play, while others have blocked affected cabinets.
Why a network outage hits so many games
ALL.net sits beneath several shared arcade functions. It enables online matches, leaderboards and the sharing of save data. Aime serves a different but connected role: it stores player information on NFC cards that players tap at compatible machines, allowing the associated account number to be checked online.
That makes this more than an individual game outage. The cabinets may remain physically usable while losing features that regular play depends on. Online competition disappears, local scores may not upload, and player information cannot be retrieved through the normal online process.
The outage therefore creates different losses for different groups. Casual visitors may still find local play worthwhile. Competitive players lose the match and leaderboard functions that motivate repeat visits. Arcades retain some revenue from functioning cabinets, but the appeal of connected machines is reduced. The harder question is how long operators can treat an infrastructure outage as a temporary inconvenience.
The breach follows an earlier PHP-related shutdown
This incident came shortly after Sega took the same services offline for several days to address a PHP exploit. When the company reopened them, it restricted ALL.net and Aime access to Japan.
That decision prompted complaints from international fans who had previously used the services. A restricted reopening gave overseas players a partial recovery, but it also exposed a recurring trade-off: Sega can restore system availability while narrowing who can use the restored network.
The current breach has undone that progress. The networks are offline again, and Sega has not announced either a firm restoration date or a clear plan for international access. The sequence matters because it suggests that restoring service alone may not settle the underlying stability and access questions.
Why Sega’s data assessment is reassuring but limited
According to Sega, a third party gained unauthorized access to the services. The company is investigating the extent of the incident, but the nature of the unauthorized access has not been disclosed.
Sega has confirmed that no customer or business-partner data was breached and that payment information was not stored on the affected servers. Those are meaningful protections, particularly while the technical scope of the breach remains unknown.
They do not change the immediate impact, however. Availability and data exposure are separate problems. Connected features remain unavailable while Sega investigates, and players are still dealing with disrupted routines at the arcade. The confirmation should also not be treated as a final account of the incident until the company finishes its investigation and discloses what occurred.
Who should care about the outage
Arcade players should care because their usual access may depend on more than the cabinet itself. Visitors expecting online competition or working leaderboards may get only a partial experience, while players who rely on Aime account information may find that a familiar sign-in and data-sharing routine is unavailable.
Arcade operators also face an uneven choice. Allowing local play can preserve some activity and keep machines from becoming completely unusable. Blocking affected cabinets avoids confusion, but it reduces the visible amount of playable hardware. The report does not indicate a uniform approach across arcades.
International players have a separate concern. Even if the services return, the previous reopening limited access to Japan. A return to service without a broader access policy would leave the same complaint unresolved.
Decision checklist before visiting an arcade
Players can make a simple check before committing time and credits:
- Check the cabinet status:** Look for an offline-mode message rather than assuming the machine is broken.
- Confirm what still works:** Ask whether local scores and save features remain available without the network.
- Do not count on Aime:** The report mentions no separate workaround for retrieving player information online.
- Adjust expectations for competitive play:** Online matches and leaderboards may be the features that are missing.
- Watch for an international-access policy:** A Japan-only reopening would not fully restore access for overseas fans.
The checklist cannot replace connected features, but it can prevent a wasted visit and identify the machines that still offer something beyond a powered-on cabinet.
What to watch next
The first question is when the machines will return, but the more revealing signals come afterward. Players should watch for Sega’s explanation of how the unauthorized access happened and whether its earlier assessment of customer data remains unchanged.
The second question is who can use the restored service. The Japan-only policy introduced after the PHP-related closure may return, so international-access announcements deserve as much attention as the restoration itself.
Sega’s November 2 notice said the investigation was expected to take some time. Until the company provides more detail and a firm timetable, local-only play remains the practical fallback for players and operators, not a full substitute for the shared network layer.
Key takeaways
- The breach affected ALL.net and Aime, taking down shared functions across multiple arcade franchises.
- Some operators are offering offline play, while others have blocked affected cabinets.
- Sega says no customer or business-partner data was breached and that affected servers held no payment information.
- The incident followed a PHP-related shutdown and a reopening that limited access to Japan.
- Players should watch for both a restoration date and a decision on international access.
Frequently asked questions
Which Sega services were affected by the outage?
ALL.net and Aime were disrupted. They support connected arcade features such as matches, leaderboards, save sharing and NFC-card player identification.
Were customer or payment details stolen?
Sega says no customer or business-partner data was breached and that payment information was not stored on the affected servers.
Can players still use Taiko no Tatsujin and Initial D offline?
Some arcade operators have allowed offline use, while others have blocked affected machines. The report does not say every cabinet supports the fallback.
When will the arcade services return?
No clear date was given. Sega said on November 2 that the investigation was expected to take some time.
Will international players regain access when the services return?
The report does not specify. After the previous PHP-related shutdown, Sega reopened the services with access limited to Japan.