Nikkei Says More Than 1.83 Million Records Exposed via Cloud Service

Nikkei, a major Japanese media company, revealed that a total of 1,830,000 records were stolen in an unauthorized access to a cloud service used for system development. The attack is said to have been carried out on the morning of October 7 using authentication credentials that had already been leaked.

According to Nikkei, of the stolen records approximately 1,680,000 remained non-identifiable personal information, while of the remainder 150,000 contained personal information including names, addresses, email addresses, phone numbers and dates of birth, and 120,000 contained only email addresses. Nikkei says no credit card information has been confirmed to have leaked.

Nikkei stated that it immediately invalidated the authentication credentials that were misused and will implement additional security measures as necessary. It is continuing to report to regulators and investigate the scope of the incident and the nature of the leaked data, and as of October 16 said it has found no evidence of misuse of personal information.

The company also explained that the incident did not cause service outages or data tampering, expressed gratitude to those involved, and said it will notify individuals separately if leakage of personal information is confirmed. This disclosure follows a previously announced leak within the past year that the company attributed to a hacked Slack account.