Nitori says attacker may have stolen 37.62 million customer records
Original title: Japanese furniture giant Nitori says hackers stole 37.6M customer records
Access may date to mid-October; passwords and card data were not exposed, the retailer says.
Japanese furniture retailer Nitori said an attacker accessed a company system and may have taken up to 37.62 million customer records. The intrusion was found on November 6, 2026, and access was blocked, though the attacker likely had access since mid-October. Exposed data may include names, contact details, dates of birth and order information. Passwords and credit card data were not exposed. Nitori notified Japan’s privacy commission and police.
Unconfirmed: Nitori says the records may have been leaked; external theft is not fully confirmed.
- The incident covers individual customers, corporate members and some non-members.
- Nitori operates 879 stores in Japan and 219 stores in other markets.
- The company warned stolen data could be used in phishing and scams.
- Nitori said it will never request passwords, card numbers or PINs by email or phone.
- Affected customers will be notified by email or post.
Impact: Up to 37.62 million customer personal and order records may have leaked
- 1.Treat unexpected requests for passwords, card numbers or PINs as phishing.
- Victims
- Nitori
- Organizations
- Personal Information Protection Commission
- Countries
- Japan
From the original article
2 min read at bleepingcomputer.com
Nitori, a major Japanese furniture and home accessories retailer, discovered that an attacker accessed a system on its network and may have stolen 37. 62 million customer records. [...]
By Bill Toulas · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.