Nikkei discloses third breach in a month: stolen credentials expose 1.83M records in cloud-hosted development system
Nikkei Inc. disclosed a third data breach in about a month, exposing 1.83 million records stored in the cloud. Attackers used stolen credentials to access a development system in the early hours of October 7. About 150,000 records contained at least one of: full names, email addresses, physical addresses, phone numbers or dates of birth, and email addresses appeared in about 120,000 of them. The remaining 1.68 million records held no identifiers, and no credit card data was exposed. Nikkei had found no evidence of misuse or online leakage as of October 16.
Technical Details
- Initial access was through stolen credentials used against a development system, which gave access to personal information stored in the cloud.
- Nikkei found no signs of system compromise, data tampering or service outages.
- This is the third recent incident. In late July, an employee's Google Workspace account was compromised, exposing personal information of employees and business partners (disclosed earlier in October). In September, an employee's Microsoft 365 account was hijacked and used to send spear-phishing emails to staff.
- The article does not attribute any of the incidents to a named actor.
Remediation
- Nikkei revoked the abused credentials and notified Japan's Personal Information Protection Commission on October 11.
- It is investigating the scope and cause, will notify affected individuals individually, and plans to strengthen security.
Linha do tempo
-
Nikkei discloses third breach in a month: stolen credentials expose 1.83M records in cloud-hosted development system
ler a análise desta fonte ocultar
Nikkei Inc. disclosed a third data breach in about a month, exposing 1.83 million records stored in the cloud. Attackers used stolen credentials to access a development system in the early hours of October 7. About 150,000 records contained at least one of: full names, email addresses, physical addresses, phone numbers or dates of birth, and email addresses appeared in about 120,000 of them. The remaining 1.68 million records held no identifiers, and no credit card data was exposed. Nikkei had found no evidence of misuse or online leakage as of October 16.
Technical Details
- Initial access was through stolen credentials used against a development system, which gave access to personal information stored in the cloud.
- Nikkei found no signs of system compromise, data tampering or service outages.
- This is the third recent incident. In late July, an employee's Google Workspace account was compromised, exposing personal information of employees and business partners (disclosed earlier in October). In September, an employee's Microsoft 365 account was hijacked and used to send spear-phishing emails to staff.
- The article does not attribute any of the incidents to a named actor.
Remediation
- Nikkei revoked the abused credentials and notified Japan's Personal Information Protection Commission on October 11.
- It is investigating the scope and cause, will notify affected individuals individually, and plans to strengthen security.