Nikkei Says Hackers Stole 1.83 Million Records Through Compromised Credentials

Summary
Nikkei says hackers used compromised credentials to access a cloud development service on October 7 and steal 1.83 million records, including personal information. The company revoked the credentials and is investigating.
Key points
- Nikkei says attackers used previously compromised credentials to access a cloud service used for system development on October 7.
- The company reports that 1.83 million records were stolen; about 1.68 million contained information it says could not identify individuals.
- Nikkei says 150,000 records included names, addresses, email addresses, phone numbers, and birth dates; another 120,000 contained email addresses.
- The company says no credit card information was compromised.
- Nikkei revoked the compromised credentials, notified regulators, and is continuing to investigate the incident and affected data.
- As of October 16, Nikkei said it had found no evidence of misuse and reported no disruption or data tampering.
Article Details
- Victim Organization
- Nikkei
- Incident Type
- Unauthorized access to a cloud service used for system development using previously compromised credentials, followed by data theft
- Data Types Exposed
- Names
- Addresses
- Email addresses
- Phone numbers
- Dates of birth
- Affected Records
- 1.83 million records were stolen. Of these, 150,000 contained names, addresses, email addresses, phone numbers, and dates of birth; 120,000 contained email addresses; and about 1.68 million contained information that Nikkei said could not identify individuals.
- Operational Impact
- Nikkei reported no disruption or data tampering. As of October 16, it had found no evidence that the stolen personal information had been misused.
- Claim Status
- confirmed
