2026 MrMax — app/online-store unauthorized access; up to 1.735M member records
Data compromised
Up to 1,735,154 app and online-store members as of Oct 3: member IDs, names, email addresses, phone numbers. NOT included per company: addresses, DOB, credit cards, passwords, purchase history. No confirmed misuse at notice time.
Technical writeup
Verified company notice — MrMax Holdings Oct 6, 2026: unauthorized access to group app and online-store servers. Suspicious access detected evening Oct 3; services temporarily suspended; external access blocked same day. Investigation found a third party exploited software functions to infiltrate servers and obtain some member information. Potentially leaked: IDs, names, emails, phones for up to 1,735,154 registered members. Addresses, DOB, cards, passwords, and purchase history not compromised per company. Customers warned about spoofed emails. recordsAffected 1735154; companyConfirmed true.
Root cause
Third party exploited software functions to infiltrate MrMax app and online-store servers; suspicious access detected evening of Oct 3, 2026; external access blocked same day.