Hackers Steal 1.8 Million Records From Nikkei

On October 7, 2026, attackers used previously compromised credentials to access a cloud service used by Nikkei for system development, resulting in the theft of approximately 1.83 million records. Of these, about 1.68 million records contained non-identifiable information, 150,000 records contained personally identifiable information (names, addresses, emails, phone numbers, dates of birth), and 120,000 records contained email addresses only. No financial data such as credit card information was accessed. Nikkei responded by revoking the compromised credentials immediately, notifying regulators, and continuing an investigation. No evidence of data misuse or operational disruption has been found.

The breach exposed personal information of approximately 150,000 individuals, including sensitive identifiers such as names, addresses, email addresses, phone numbers, and dates of birth. This could potentially increase the risk of identity theft or phishing attacks for those affected. However, no financial data was compromised, and no misuse of the stolen data has been detected to date. The incident did not cause service disruptions or data tampering.

Nikkei revoked the compromised credentials immediately upon discovery and has notified relevant regulators. The company is investigating the incident further and plans to implement additional security measures as necessary. Organizations using cloud services should ensure credential security and monitor for unauthorized access. No further immediate action is indicated based on current information.