Now Hacked
EN-GB
Data breach

Maru-Jan leak exposes emails and passwords of all 1,855,578 members

First reported · Last reported · 12 related reports

The passwords and registered email addresses of all 1,855,578 members of Maru-Jan, an online mahjong service operated by Japan’s SignalTalk, were downloaded externally. The attacker exploited a function in the administration system. Following emergency maintenance and the blocking of the intrusion route, the operator resumed the service on 7 November 2026 and asked members to change their passwords.

Key facts

Affected organisation
SignalTalk
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
Passwords and registered email addresses of all 1,855,578 members leaked
Cause / method
Unauthorised access and downloading of member information by exploiting a function in the administration system
Location
Japan

If your data was exposed

Exposed dataEmailPassword

  1. Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
  2. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.

Timeline

  1. The operator announced the leak of information belonging to all 1,855,578 members and resumed the service after addressing the intrusion route.
  2. It was disclosed that the intrusion route had been blocked and members had been asked to change their passwords.

12 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.