<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>Maru-Jan online mahjong leaks email addresses and passwords of all 1.86 million members · updates</title>
  <link>https://pwn.watch/i/maru-jan-online-mahjong-1-86m-passwords-leak-nov-2026</link>
  <description>Signal Talk, which runs the Japanese online mahjong service Maru-Jan, said on Nov 7 2026 that an attacker abused a feature of its management system and, by about 15:00 JST on Nov 4, downloaded member data including the passwords of all 1,855,578 members and their email addresses where registered. Signal Talk does not hold credit card numbers, so none were included. It says it has identified the intrusion route and fixed the abused part, and it reopened the service at 16:00 JST on Nov 7. It has not said how the passwords were stored. Old passwords still work, so Signal Talk asks every member to change their Maru-Jan password and any matching password used on other services.</description>
  <language>en</language>
  <lastBuildDate>Sat, 07 Nov 2026 00:00:00 GMT</lastBuildDate>
  <atom:link href="https://pwn.watch/i/maru-jan-online-mahjong-1-86m-passwords-leak-nov-2026/feed.xml" rel="self" type="application/rss+xml" />
  <item>
    <title>Maru-Jan online mahjong leaks email addresses and passwords of all 1.86 million members: Signal Talk discloses the leak, says it has identified the intrusion route and fixed the abused part, and reopens Maru-Jan at 16:00 JST after emergency maintenance. It asks all members to change their Maru-Jan password and any reused passwords elsewhere.</title>
    <link>https://pwn.watch/i/maru-jan-online-mahjong-1-86m-passwords-leak-nov-2026</link>
    <guid isPermaLink="false">https://pwn.watch/i/maru-jan-online-mahjong-1-86m-passwords-leak-nov-2026#2026-11-07-0bc8e2f9</guid>
    <pubDate>Sat, 07 Nov 2026 00:00:00 GMT</pubDate>
    <category>high</category>
    <description>&lt;p&gt;&lt;a href=&quot;https://www.signaltalk.com/press/20261107.php&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;</description>
  </item>
  <item>
    <title>Maru-Jan online mahjong leaks email addresses and passwords of all 1.86 million members: By about 15:00 JST, an attacker abusing a feature of Signal Talk's Maru-Jan management system has downloaded member data, including the email addresses and passwords of all 1,855,578 members.</title>
    <link>https://pwn.watch/i/maru-jan-online-mahjong-1-86m-passwords-leak-nov-2026</link>
    <guid isPermaLink="false">https://pwn.watch/i/maru-jan-online-mahjong-1-86m-passwords-leak-nov-2026#2026-11-04-7f8ff4ec</guid>
    <pubDate>Wed, 04 Nov 2026 00:00:00 GMT</pubDate>
    <category>high</category>
    <description>&lt;p&gt;&lt;a href=&quot;https://www.signaltalk.com/press/20261107.php&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;</description>
  </item>
</channel>
</rss>
