Nikkei Says Hackers Stole 1.83 Million Records Through Compromised Credentials

· Original article ↗

Summary

Nikkei says hackers used compromised credentials to access a cloud development service on October 7 and steal 1.83 million records, including personal information. The company revoked the credentials and is investigating.

Key points

  • Nikkei says attackers used previously compromised credentials to access a cloud service used for system development on October 7.
  • The company reports that 1.83 million records were stolen; about 1.68 million contained information it says could not identify individuals.
  • Nikkei says 150,000 records included names, addresses, email addresses, phone numbers, and birth dates; another 120,000 contained email addresses.
  • The company says no credit card information was compromised.
  • Nikkei revoked the compromised credentials, notified regulators, and is continuing to investigate the incident and affected data.
  • As of October 16, Nikkei said it had found no evidence of misuse and reported no disruption or data tampering.

Article Details

Victim Organization
Nikkei
Incident Type
Unauthorized access to a cloud service used for system development using previously compromised credentials, followed by data theft
Data Types Exposed
  • Names
  • Addresses
  • Email addresses
  • Phone numbers
  • Dates of birth
Affected Records
1.83 million records were stolen. Of these, 150,000 contained names, addresses, email addresses, phone numbers, and dates of birth; 120,000 contained email addresses; and about 1.68 million contained information that Nikkei said could not identify individuals.
Operational Impact
Nikkei reported no disruption or data tampering. As of October 16, it had found no evidence that the stolen personal information had been misused.
Claim Status
confirmed

MITRE ATT&CK

Industries