ENKR

SOURCENEXT member data breach

Add to my breach check

Made public · 22,519,960 member records possibly leaked

What leaked10

Replaceable

  • Plain-text password

Hard to replace

  • Mobile number
  • Home or delivery address
  • Email address
  • Employer
  • Job title
  • Other profile data

Permanent

  • Date of birth
  • Full name
  • Gender
  • Plain-text passwordSOURCENEXT told ITmedia the passwords were stored encrypted but leaked in decrypted form; its notice lists 'password' only as possibly leaked
  • Mobile numberphone and fax numbers · the notice does not say mobile or landline
  • Employercompany name and department
  • Full namename and its kana reading
  • Other profile datasubscribed services, registration and login dates

To-dos6 · about 1 h 30 min in all

  1. Change the leaked password everywhere you reused itabout 30 minfreeStops: account takeover
  2. Use an authenticator app or passkey instead of SMS codesabout 20 minfreeLimits harm from: account takeover, SMS code theft
  3. Turn on two-step sign-in for email and bankingabout 15 minfreeLimits harm from: account takeover
  4. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: scam calls, phishing messages
  5. Turn on instant transaction alertsabout 5 minHelps you notice: scam calls
  6. Remove your address and phone from public profiles and tighten SNS privacyabout 20 minfreeLimits harm from: visits or contact at home

What happened next9 events

  1. Undetected 2 events4 days · Back to latest
  2. Response 7 eventsNotice in 2 days · show events
  3. RemedyNone on record
  4. PenaltyNone on record
  5. DisputesNone on record

Undetected: 2 events

Back to latest
  1. Confirmed unauthorised access to the system that manages member data
  2. Intrusion began
Company
SOURCENEXT
When it happened
–
Company detected it
Made public
Notice
Leak confirmed
Affected
22,519,960 member records possibly leaked · everyone registered by October 13, 2026 13:36; fields differ by member

Sources