Nikkei Discloses Breach Exposing 1.83 Million Records

Summary

Nikkei says stolen credentials were used to access a development system on October 7, exposing 1.83 million records. The company reported that 150,000 records contained personal identifiers and said it found no evidence of misuse as of October 16.

Key points

• Nikkei said attackers used stolen credentials to access a development system in its network on October 7, exposing personal information stored in the cloud.
• The company reported that 150,000 records included at least one identifier, such as a name, email address, physical address, phone number, or birth date; 120,000 records contained email addresses.
• The remaining 1.68 million records reportedly contained no identifying information, and no credit card data was exposed.
• Nikkei revoked the compromised credentials and notified Japan’s Personal Information Protection Commission on October 11.
• As of October 16, Nikkei said it had no evidence that the accessed information was misused or leaked online, and found no signs of data tampering or service outages.
• The company said it was still investigating the breach’s scope and cause and would individually notify affected people.

MITRE ATT&CK

Industries