Third Nikkei breach exposes 1.83 million records
In early October, attackers slipped into a development system at Nikkei Inc. using stolen credentials and walked away with the contents of a cloud storage bucket. The haul: 1.83 million personal‑information records – the third such incident for the Japanese news giant in just a month.
Only about 150,000 of those rows actually contain identifiers – full names, email addresses, physical addresses, phone numbers or dates of birth. Email addresses show up in 120,000 records. The remaining 1.68 million rows are essentially blank, and no credit‑card numbers were part of the dump.
How the breach unfolded
On the morning of October 7, the stolen login was used to reach a development environment. From there, the intruders accessed a cloud‑hosted database that held the personal data. Nikkei revoked the compromised credentials within hours and reported the incident to Japan’s Personal Information Protection Commission on October 11.
As of October 16, the company sees no evidence that the data has been posted online or otherwise abused. There are also no signs of broader system compromise, data tampering, or service outages.
History of recent intrusions
This isn’t the first time the firm’s accounts have been hijacked. In July, a hacker broke into an employee’s Google Workspace account and siphoned employee and partner data. A month later, a different actor seized a Microsoft 365 account and used it to launch spear‑phishing emails across the organization.
What you can do to protect yourself
- Enforce multi‑factor authentication (MFA) on all privileged and cloud‑service accounts.
- Adopt a zero‑trust model: assume every credential could be compromised and verify continuously.
- Implement strict cloud‑security posture management – monitor for unusual data‑exfiltration patterns.
- Rotate passwords regularly and retire shared or generic accounts.
- Conduct regular phishing simulations and security awareness training, especially for cloud‑service users.
- Maintain an incident‑response playbook that includes rapid credential revocation and notification to regulators.
For anyone who received a notification from Nikkei, keep an eye on your accounts and consider changing passwords on any services where you reused similar credentials.