2026-11-09
Unauthorized access to the online mahjong game Maru-Jan (1,855,578 members): email addresses and passwords leaked — what members should do
On November 7, 2026, Signaltalk Co., Ltd. announced that unauthorized access to Maru-Jan, the online mahjong game it operates, had leaked the email addresses and passwords of 1,855,578 members. The company says a function of its administration system was abused and that data including member information was downloaded externally by about 15:00 on November 4. The affected group is all Maru-Jan members; email addresses are included for members who registered one. Credit card numbers are not included because the company does not hold them. The notice does not say how passwords were stored (for example whether they were hashed). The company says it identified the intrusion route, applied a fix and resumed service at 16:00 on November 7. It asks members to change their Maru-Jan password, change the password at any other service where they used the same one, and watch for suspicious emails. As of November 9, 2026, no follow-up notice had been found. This site's conclusion: change the password at any service where you reused your Maru-Jan password before anything else, and do not open links in emails that use the Maru-Jan name.