Treasure Factory discloses 746,277 email addresses leaked
Treasure Factory disclosed on 23 October 2026 that unauthorised access to two service systems exposed 746,277 customer email addresses.
Areas of Focus
Email InfrastructureSMTP & MTA ArchitectureSPF, DKIM, DMARC & SRSEmail Privacy & SecurityCredential Stuffing PreventionSoftware Engineering
Articles by Ahsan Luqman
271 articlesBlastmail Breach: Four Brands Warn of Subscriber Leaks
A hacked mail vendor confirms some subscriber lists were taken; a newspaper says about 253,000 members leaked, and three more brands warn of possible leaks.
Capcom: 11.77M CAPCOM ID emails leaked, warns of phishing
Capcom confirmed 11.77 million CAPCOM ID emails leaked and warned that forgers will impersonate the company. The leaked login metadata makes them convincing.
Is Yahoo Mail Safe After the 3 Billion Record Breaches?
Yahoo Mail holds the record for the largest email breaches: 3 billion accounts in 2013 and 500 million in 2014. The account can be hardened; the address cannot.
Can One Account Hold Your Real Name and Anonymous Aliases?
One account can hold your real-name address and your anonymous aliases. It also holds the record that joins them. Whether that matters is a threat-model call.
Should You Use a Separate Email for Banking?
Banking deserves its own email address, but the bank itself should get a permanent real address, never a masked one. Aliases for the rest keep it isolated.
When a Service Blocks Your Alias Email, Try This Order First
Your alias was rejected because its domain sits on a blocklist, not because aliases fail. Change the domain first and keep your real inbox for last.
Comic C-MoA Confirms 319 Leaked Member Records, 4.2M Logs
Two numbers: up to 4.2M log records (duplicates possible, no passwords) and 319 member records with hashed passwords. The small one is the dangerous one.
How Often Should You Change Your Email Password?
NIST, Microsoft and CISA all revoked scheduled password rotation. Change your email password on breach or suspicion, keep it unique, and turn on app-based 2FA.
How to Delete an Old Email Account Without Losing Anything
Deleting an old email account is easy. Untangling the identity behind it is not. A guide to auditing, backing up, and closing the account safely.