Nikkei reports third data breach in a month, exposing 1.8 million records
The Japanese media group disclosed that hackers used stolen credentials to access a development system, marking its third security incident in roughly four weeks.
Key points
- Nikkei disclosed a breach exposing 1.83 million records, the third incident in about a month.
- Hackers used stolen credentials to access a cloud-based development system on October 7.
- Only 150,000 records contained personally identifiable information; no credit card data was exposed.
Nikkei Inc. disclosed a new data breach, revealing that attackers accessed personal information stored in its cloud environment. This event marks the third cybersecurity incident the Japanese media giant has reported in approximately one month, following earlier compromises involving employee accounts.
The company stated that hackers used stolen credentials to enter a development system within its network during the early morning hours of October 7. According to BleepingComputer, the unauthorized access exposed personal information held in the cloud. Nikkei revoked the abused credentials shortly after detecting the intrusion and notified the Personal Information Protection Commission on October 11.
Context and Background
Nikkei is a major Japanese business news and financial information group that employs over 10,100 people and generates annual revenue of $2.5 billion. The organization owns the Financial Times and operates as the country’s largest business-focused media company. The firm has faced a series of security challenges recently, with this latest cloud breach adding to its growing list of disclosed incidents.
Earlier this month, the company disclosed a breach from late July where hackers compromised an employee's Google Workspace account. That incident allowed attackers to access personal information belonging to both employees and business partners. In September, Nikkei announced that threat actors hijacked another employee’s Microsoft 365 account to send spear-phishing emails to staff members.
Who Is Affected
The October 7 breach exposed a total of 1.83 million personal information records. However, Nikkei clarified that the majority of these records contained no identifying information. Specifically, 1.68 million of the exposed records held no identifiers, meaning they cannot be linked to specific individuals without additional context or data.
A smaller subset of 150,000 records contained at least one type of personally identifiable information. These data types included full names, email addresses, physical addresses, telephone numbers, and dates of birth. Email addresses appeared in 120,000 of the affected records. The company confirmed that no credit card information was exposed in this incident.
As of October 16, Nikkei reported no evidence that the accessed information was misused or leaked online. The firm also found no signs of system compromise or data tampering resulting from this specific incident. Service outages were not experienced. The company stated it is working urgently to determine the cause and will implement necessary security measures. Affected individuals will receive individual notifications.
What should you do?
Organizations should monitor for unauthorized access to development environments, which are often less secure than production systems. Users should verify the legitimacy of any communications claiming to be from Nikkei regarding data exposure. Security teams should review credential management practices to prevent reuse across different systems.
What to do and how to stay safe: Nikkei
- Monitor your email inbox for official notifications from Nikkei regarding potential exposure of your personal data.
- Review your password hygiene and ensure you are not reusing credentials across personal and professional accounts, especially for cloud services.
- Enable multi-factor authentication on all accessible accounts to add a layer of defense against stolen credentials.
- Watch for phishing attempts that may reference recent breaches, as attackers often exploit known incidents to trick victims.
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Did the Nikkei breach expose credit card information?
No, the company confirmed that no credit card information was exposed in the October 7 incident.
How many records contained personally identifiable information?
150,000 records contained at least one type of personally identifiable information, such as names or email addresses.
When did the hackers access the system?
Hackers accessed the development system during the early morning hours of October 7.
