Sourcenext Data Breach
Japanese software publisher and hardware maker Sourcenext Corporation announced that an external attacker exploited its member information retrieval API between October 9 and October 13, 2026.
Exposed Data Types
7- Names
- Email addresses
- Passwords
- Physical addresses
- Phone numbers
- Dates of birth
- Employers
About This Breach
Forensic analysis showed that up to 22,519,960 customer records were potentially accessed or exfiltrated before engineers blocked the unauthorized queries.
Compromised fields included full names, email addresses, account passwords, postal addresses, phone numbers, dates of birth, and employer or department names for business accounts. Credit card numbers were not stored on the affected server, and Sourcenext suspended the vulnerable API endpoint while advising customers to update their credentials.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
