ENKR

SOURCENEXT member data breach

Add to my breach check

Made public · 22,519,960 member records possibly leaked

What leaked10

Replaceable

  • Plain-text password

Hard to replace

  • Mobile number
  • Home or delivery address
  • Email address
  • Employer
  • Job title
  • Other profile data

Permanent

  • Date of birth
  • Full name
  • Gender
  • Plain-text passwordSOURCENEXT told ITmedia the passwords were stored encrypted but leaked in decrypted form; its notice lists 'password' only as possibly leaked
  • Mobile numberphone and fax numbers · the notice does not say mobile or landline
  • Employercompany name and department
  • Full namename and its kana reading
  • Other profile datasubscribed services, registration and login dates

To-dos6 · about 1 h 30 min in all

  1. Change the leaked password everywhere you reused itabout 30 minfreeStops: account takeover
  2. Use an authenticator app or passkey instead of SMS codesabout 20 minfreeLimits harm from: account takeover, SMS code theft
  3. Turn on two-step sign-in for email and bankingabout 15 minfreeLimits harm from: account takeover
  4. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: scam calls, phishing messages
  5. Turn on instant transaction alertsabout 5 minHelps you notice: scam calls
  6. Remove your address and phone from public profiles and tighten SNS privacyabout 20 minfreeLimits harm from: visits or contact at home

What happened next9 events

  1. Undetected 2 events4 days · show events
  2. Response 7 eventsNotice in 2 days · Back to latest
  3. RemedyNone on record
  4. PenaltyNone on record
  5. DisputesNone on record

Response: 7 events

Back to latest
  1. Consulted the local police
  2. Began emailing affected members; letters planned for those without an email address
  3. Opened a dedicated hotline, inquiry form and FAQ
  4. Reported to the Personal Information Protection Commission
  5. Announced that data of 22,519,960 member records may have leaked
  6. Blocked the malicious traffic and contained the intrusion
  7. Invalidated every member's password and required a reset at next login
Company
SOURCENEXT
When it happened
–
Company detected it
Made public
Notice
Leak confirmed
Affected
22,519,960 member records possibly leaked · everyone registered by October 13, 2026 13:36; fields differ by member

Sources