MrMax Holdings announced on the 6th that it had confirmed a third party gained unauthorized access to the servers for the MrMax app and online store operated by a group company, resulting in the leak of up to 1,735,154 members' information. The potentially leaked information includes app and online store member IDs, names, email addresses, and phone numbers, while addresses, dates of birth, credit card information, passwords, and purchase histories were not leaked. The company detected suspicious access to the MrMax servers on October 3, temporarily suspended services, and took measures to block external access. A subsequent investigation revealed that a third party had breached the servers and that some members' personal information had leaked.
MrMax Holdings Ltd.MrMax confirmed a third-party breach of its app/online store servers leaking up to 1.73 million members' personal data, exposing it to legal/regulatory fallout.
