Sourcenext: mass leak of member data

Sourcenext detected abuse of its member-information API on October 13 and contained it by 13:36 that day. Its investigation found access from around 10:00 on October 9 and possible exposure of up to 22,519,960 records. Fields vary by registration and include names, emails, passwords, addresses, genders, phone and fax numbers, birth dates, employer details, service enrollment and registration/login dates. Card data was not stored in the affected system. Affected passwords were invalidated and an independent investigation continues.