Stolen Credentials Expose 1.83 Million Records in Nikkei Development Cloud Breach

Japanese media company Nikkei disclosed that attackers used previously compromised credentials to access a cloud service used for system development on October 7, exposing approximately 1.83 million records. About 150,000 records reportedly contained identifying information, including 120,000 with email addresses, while 1.68 million contained no information that could identify individuals. Reporting did not fully reconcile the record categories. Nikkei said no credit card information was compromised.

The breach was Nikkei’s third cybersecurity incident in about a month. The company revoked the abused credentials and notified Japan’s Personal Information Protection Commission on October 11. As of October 16, Nikkei reported no evidence of misuse or online leakage of the affected information, no data tampering, and no service disruption. Its investigation into the scope of the breach remained ongoing.