AI Security
Lessons From the 22.5 Million-Record Sourcenext Breach: Protecting Member Data APIs
On 15 October 2026, Japanese software company Sourcenext disclosed that unauthorized use of its member information API may have exposed up to 22,519,960 records. This article separates the disclosed facts from what is still unknown, then lists six items for operators who run APIs that return member data and how to act if a breach happens, based on OWASP and Japan's Personal Information Protection Commission.
2026-10-20Ryuta Hamamoto