2026-10-17
SourceNext Member Data Leak (22,519,960 Records): Emails, Passwords and Addresses May Be Exposed — What Members Should Do
On October 15, 2026, SOURCENEXT CORPORATION announced that a third party had gained unauthorized access to member data it manages and that personal data of its registered members had leaked outside the company. According to the company, from around 10:00 on October 9 a third party misused a member data retrieval API to obtain member information; the company confirmed the unauthorized access at around 9:00 on October 13 and completed containment by 13:36 the same day. The data that may have leaked covers 22,519,960 records. The items are email address, password, name, name in katakana, address, gender, phone number, fax number, date of birth, company name, job title, department and system identifiers (subscribed services, registration date, login date and so on); the items differ by how each member registered. Credit card data is not stored in the affected system and is not included, the company says. In an update on October 16, the company said every member's password has already been changed and the old passwords no longer work, and asked members to set a new one. How passwords were stored (whether encrypted or hashed) has not been disclosed. This site's take: anyone who has registered with SourceNext should first change the password on any other service that uses the same email and password, then set a new SourceNext password through the official website opened themselves, and not use links or numbers in emails, text messages, calls or letters claiming to be SourceNext.