Nikkei breach: stolen credentials expose 1.83M personal-information records from a development cloud
Nikkei Inc. development cloud service (customer data of Nikkei and group services such as Nikkei BP)
Japanese media group Nikkei Inc. (owner of the Financial Times) says attackers used stolen credentials, obtained by unknown means, to access a cloud service it uses for system development in the early hours to morning of October 7, 2026, and personal information stored there leaked. As of October 16, about 1.83 million items had leaked: about 150,000 contain a name, email address, postal address, phone number or date of birth (about 120,000 include an email address), and about 1.68 million contain only information that cannot identify a person. No credit card data. Nikkei disabled the credentials, reported to Japan's Personal Information Protection Commission on October 11 and says it found no misuse so far. On October 21 Nikkei BP said about 800,000 of the leaked items belong to users of its services. BleepingComputer counts this as Nikkei's third disclosed incident in about a month.
Why this severity: 1.83M records, about 150K with name/email/address/phone/date of birth; no credit card data; no misuse found as of Oct 16
- Started
- Oct 7, 2026
Affected
- Personal information stored in a Nikkei cloud service used for system development (about 1.83 million items)
- Nikkei BP service users: about 800,000 items (about 50,000 with name, email, address, phone or date of birth)
Fixed in
- Nikkei disabled the stolen credentials used for the access; scope review ongoing
Timeline4
Nikkei BP says about 800,000 of the leaked items belong to users of its services (about 50,000 with name, email, address, phone or date of birth; about 750,000 identifiers only).
SourceNikkei discloses the breach: about 1.83 million items leaked, about 150,000 with identifying details, no credit card data, no misuse or system outage found. It will contact affected people individually.
SourceNikkei reports the incident to Japan's Personal Information Protection Commission.
SourceAttackers use stolen credentials to access a Nikkei cloud service used for system development, from the early hours to the morning, and personal information stored there leaks.
Source
Advisories2
News & write-ups3
Posts1
#Nikkei data breach affected over 1.8 million records t.co/rmToMCQ0Um #securityaffairs #hacking
Notes & caveats
How the credentials were stolen has not been disclosed. Counts are Nikkei's as of Oct 16 and may change as its scope review continues. The Nikkei BP figure (Oct 21) is part of the 1.83M total, not in addition to it.
Get an email when a new major security incident drops. No spam, unsubscribe any time.
