Nikkei discloses third breach in a month, 1.83 million records exposed
Original title: Nikkei discloses third data breach in a month, 1.8M records exposed
Stolen credentials opened a development system on October 7; 150,000 records held identifiers and no card data was exposed.
Nikkei Inc. said hackers used stolen credentials in the early morning of October 7 to reach a development system and personal information stored in the cloud. Of 1.83 million records, 150,000 contained at least one identifier and 1.68 million had none; no credit card data was exposed. Nikkei revoked the credentials, notified Japan’s Personal Information Protection Commission on October 11, and said that as of October 16 it had no evidence of misuse, leaks, tampering, or outages. It is the company’s third disclosed incident in about a month, after a Google Workspace compromise and a Microsoft 365 account used for spear-phishing.
Unconfirmed: Nikkei says it had no evidence as of October 16 that the data was misused or leaked online.
- Email addresses appeared in 120,000 of the exposed records.
- Identifiers included names, emails, addresses, phone numbers, and dates of birth.
- Affected people will receive individual notifications, the company said.
- A late-July Workspace breach and a September Microsoft 365 hijack were disclosed earlier.
Impact: Personal data from a cloud-stored development system
- ATT&CK
- T1078 Valid Accounts
- Victims
- Nikkei Inc.
- Organizations
- Personal Information Protection Commission
- Countries
- Japan
From the original article
2 min read at bleepingcomputer.com
Nikkei Inc. disclosed a new data breach, the third in about a month, that exposed 1. 83 million personal information records.
By Bill Toulas · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.