Nikkei (Organization): news timeline & CVEs

Nikkei Discloses Two Employee Cloud Account Compromises

Nikkei says two employee cloud accounts were hijacked, exposing contacts and sending about 9,000 phishing emails.

Japanese publisher Nikkei disclosed that an employee Google Workspace account was accessed externally from late July, potentially exposing names and email addresses of 1,646 employees, partners, and others. A separate Microsoft 365 account was used on September 30 to send about 9,000 emails directing recipients to malicious sites, and some mailbox content may have been exposed. Nikkei reset both passwords, reported the cases to Japan’s Personal Information Protection Commission, and has not said how the accounts were compromised. Group unit Nikkei BP also reported a September 30 phishing-led mailbox compromise affecting 26 contacts, after a 2025 Slack breach tied to infostealer-stolen credentials exposed 17,368 people.

Infosecurity MagazineOct 6, 14:00 UTC · 2d agoData breach in the wild 3 sources

Nikkei discloses breaches of employees’ Microsoft, Google email accounts

Nikkei says attackers breached Google and Microsoft employee email accounts and sent 9,000 phishing emails.

Japanese publisher Nikkei said attackers accessed an employee Google Workspace account in late July, exposing names and email addresses of 1,646 employees and business partners, not readers or interviewees. In September, attackers accessed a Microsoft 365 account and on September 30 used it to send about 9,000 phishing emails with malicious links to staff and interviewees. Nikkei reset passwords, said no further unauthorized logins were seen, and has not attributed the incidents. The company previously disclosed a Slack breach affecting more than 17,000 people, a 2022 ransomware attack on its Singapore subsidiary, and a 2019 business-email-compromise loss of about $29 million.

BleepingComputerupdated Oct 6, 14:00 UTC · 2d agofirst Oct 6, 09:25 UTC · 3d agoData breach in the wild 3 sources

Japanese media group Nikkei discloses cyberattack targeting journalistic sources

Nikkei says a hijacked Microsoft 365 account sent about 9,000 phishing emails, including to journalistic sources.

Nikkei disclosed that an attacker compromised an employee Microsoft 365 account and, on September 30, used it to send about 9,000 phishing emails with malicious links to people inside and outside the company, including journalistic sources. Names, email addresses, and some email contents may have been exposed; Nikkei reset the password, warned recipients, and reported the case to Japan’s data protection authority. Separately, unauthorized access to a Google Workspace account from late July may have exposed personal data of 1,646 employees and partners. Neither incident is attributed, and Nikkei says it has seen no further unauthorized access.

The Recordupdated Oct 6, 14:00 UTC · 2d agofirst Oct 5, 13:15 UTC · 3d agoData breach in the wild 3 sources1

Nikkei

Timeline3 articles

Appears with

Nikkei Discloses Two Employee Cloud Account Compromises

Nikkei discloses breaches of employees’ Microsoft, Google email accounts

Japanese media group Nikkei discloses cyberattack targeting journalistic sources