Overview
- On October 7 attackers used previously stolen employee credentials to access a cloud development system and took about 1.83 million records, the company says.
- Nikkei says it revoked the compromised credentials and reported the incident to Japan’s Personal Information Protection Commission on October 11, and it had found no evidence of data misuse as of October 16.
- About 150,000 of the records contained personal identifiers such as full names, addresses, phone numbers and dates of birth, roughly 120,000 included email addresses, and about 1.68 million records had no identifying information.
- Nikkei will notify individuals if their data is confirmed leaked and has launched a forensic probe to identify the breach cause and scope.
- This disclosure follows two recent account compromises at the company — a late‑July Google Workspace breach and a September Microsoft 365 hijack — raising concerns about repeated credential theft, risk to sources and partners, and likely regulatory and reputational fallout.