Maru-Jan online mahjong leaks email addresses and passwords of all 1.86 million members

Teaser from the source

Signal Talk, which runs the Japanese online mahjong service Maru-Jan, said on Nov 7 2026 that an attacker abused a feature of its management system and, by about 15:00 JST on Nov 4, downloaded member data including the passwords of all 1,855,578 members and their email addresses where registered. Signal Talk does not hold credit card numbers, so none were included. It says it has identified the intrusion route and fixed the abused part, and it reopened the service at 16:00 JST on Nov 7. It has not said how the passwords were stored. Old passwords still work, so Signal Talk asks every member to change their Maru-Jan password and any matching password used on other services.

This is the RSS-feed teaser. Read the full article at the original source.