Japanese media group Nikkei discloses cyberattack targeting journalistic sources
Nikkei says a hijacked Microsoft 365 account sent about 9,000 phishing emails, including to journalistic sources.
Nikkei disclosed that an attacker compromised an employee Microsoft 365 account and, on September 30, used it to send about 9,000 phishing emails with malicious links to people inside and outside the company, including journalistic sources. Names, email addresses, and some email contents may have been exposed; Nikkei reset the password, warned recipients, and reported the case to Japan’s data protection authority. Separately, unauthorized access to a Google Workspace account from late July may have exposed personal data of 1,646 employees and partners. Neither incident is attributed, and Nikkei says it has seen no further unauthorized access.