The latest Nikkei data breach exposed 1.83 million records after attackers used stolen credentials to access a development system. It marks the Japanese media group’s third cybersecurity disclosure in approximately a month.
According to Nikkei, 150,000 records contained identifying information, while the remaining 1.68 million contained no identifiers. The company also said the incident did not expose credit card information.
Investigators are still assessing the breach. As of October 16, Nikkei had found no evidence that anyone had misused the accessed information or published it online.
Stolen Credentials Enabled Access to Cloud-Stored Information
Nikkei said the unauthorized access occurred during the early morning hours of October 7. Attackers used stolen login credentials to enter a development system within its network.
That access exposed information the company stored in the cloud. However, Nikkei has not explained how the attackers obtained the credentials.
The company revoked the credentials involved and notified Japan’s Personal Information Protection Commission on October 11.
Meanwhile, its investigation continues to establish the full scope and cause of the incident. Nikkei said it would strengthen security and notify affected individuals directly.
Identifying Details Appeared in 150,000 Records
The exposed records varied in sensitivity. Approximately 150,000 contained at least one identifying detail, such as a full name, email address, postal address, telephone number or date of birth.
Email addresses appeared in 120,000 records. That figure forms part of the reported exposure and should not be added to the total as a separate group.
By contrast, Nikkei said the remaining 1.68 million records contained no identifying information.
The figures describe records rather than a confirmed number of affected people. Consequently, the disclosure does not establish that 1.83 million individuals had personal details exposed.
No Service Outages or Data Tampering Reported
Nikkei said it had found no signs of further system compromise or data tampering resulting from the incident. Its services also continued operating without outages.
However, uninterrupted service does not change the confirmed unauthorized access to stored information.
Similarly, the absence of evidence of misuse reflects the investigation’s findings as of October 16. It does not establish what may happen to the information later.
For now, the company is examining the exposure and preparing individual notifications.
Two Earlier Incidents Involved Employee Accounts
The Nikkei data breach follows two other recently disclosed incidents involving employee accounts.
Earlier in October, Nikkei reported that attackers had compromised an employee’s Google Workspace account in late July. That incident exposed personal information relating to employees and business partners.
Separately, the company announced in September that attackers had hijacked an employee’s Microsoft 365 account. They then used it to send targeted phishing emails to Nikkei staff.
These incidents involved different accounts and access routes. The available information does not establish that the same attackers carried out all three.
Furthermore, three disclosures within approximately a month do not mean all three intrusions occurred during that period. The Google Workspace compromise dates back to July.
Investigation Continues Into Latest Exposure
Nikkei, which owns the Financial Times, is a major provider of business news and financial information.
The company has committed to determining the extent of the latest incident and implementing additional security measures. However, it has not yet provided a final count of affected individuals.
Its current disclosure distinguishes between the overall record exposure and the smaller subset containing identifying details. Further findings may clarify the scope as the investigation progresses.
0 responses to “Nikkei Data Breach Exposes 1.83 Million Records in Third Recent Disclosure”