Nikkei disclosed a third cybersecurity incident in about a month, saying attackers used stolen credentials to access a development system and expose 1.83 million records stored in the cloud. The company said the intrusion happened on October 7, with about 150,000 records containing personal data such as names, email addresses, phone numbers, street addresses, and dates of birth; 120,000 included email addresses. Nikkei says it revoked the abused credentials, notified Japan’s privacy regulator on October 11, and had seen no evidence of misuse or service disruption as of October 16.
Why it matters: People whose data was in the affected systems face phishing and identity-fraud risk, especially given Nikkei’s recent string of account compromises. Organizations should treat this as a sign to review cloud and development-system access, investigate credential theft, and rotate exposed credentials quickly.
Ionut Arghire
2026.10.20
99% relevant
This article is a direct report on the same Nikkei breach, adding the record counts, the split between identifiable and non-identifiable data, the use of previously compromised credentials to access a cloud service used for system development, and the confirmation that no payment-card data or service disruption has been found.
Bill Toulas
2026.10.19
100% relevant
The article establishes a distinct new Nikkei breach event: an October 7 credential-based intrusion into a development system that exposed 1.83 million records, separate from the company’s earlier Google Workspace and Microsoft 365 account incidents.
← Back to all stories