Nitori Says Hackers May Have Exposed 37.62 Million Customer Records
Summary
Nitori says an attacker accessed its network from mid-October until November 6, 2026, and may have exposed up to 37.62 million customer records. Passwords and credit card information were not exposed, the company says.
Key points
- Nitori confirmed unauthorized access to a company-managed system on November 6 and says the attacker may have had access since mid-October.
- The company says up to 37.62 million records may have been leaked externally.
- Potentially exposed information includes names, contact details, addresses, dates of birth, membership numbers, and online order information.
- Nitori says registered-member passwords and credit card information were not exposed.
- The company blocked access, addressed system vulnerabilities, and strengthened threat monitoring.
- Nitori notified Japan’s Personal Information Protection Commission and police, and plans to contact affected customers.
Article Details
- Victim Organization
- Nitori
- Incident Type
- Unauthorized access to a company system with possible theft or external disclosure of customer records
- Disclosure Date
- 2026-11-10
- Data Types Exposed
- Membership numbers
- Names
- Email addresses
- Postal addresses
- Telephone numbers
- Dates of birth
- Gender
- Company names
- Department names
- Representatives’ names
- Company addresses and telephone numbers
- Contact persons’ names, email addresses, and telephone numbers
- Online order information
- Affected Records
- Up to 37.62 million records may have been leaked externally.
- Operational Impact
- Nitori detected the intrusion on November 6, blocked the unauthorized access, addressed system vulnerabilities, and strengthened threat monitoring. No operational disruption was reported.
- Ransom Or Extortion
- None reported.
- Claim Status
- confirmed