A cyberattack on a third-party email service exposed 227,216 email addresses used by Sumitomo Mitsui Banking Corporation (SMBC). The bank uses the service, operated by Arara Inc.