Japanese retailer Nitori says a third party accessed one of its systems and up to 37.62 million records may have leaked
Reported1 distinct origin, 0 independent.
Japanese furniture and home goods retailer Nitori Holdings said in a notice dated 9 November that on 6 November it confirmed unauthorized access by a third party to a system it manages, blocked the access and began an investigation with outside specialists. Nitori said up to 37.62 million records of personal information held on its servers may have leaked, including member and purchaser names, addresses, email addresses, phone numbers, dates of birth and gender, and said login passwords and credit card information were not among them. Nitori said access may also have occurred from mid to late October. BleepingComputer, reporting the notice on 10 November, said Nitori has informed Japan's Personal Information Protection Commission and the police. Nobody has named an actor.
- When
- 6 November 2026
- Where
- Japan, Japan
- What
- cyber, company
- Attribution
- Not attributed. Nitori named no attacker, and no government, court or examining company has named one.
- In the record
- Published 2026-11-11 01:43 UTC
Sources
- Evidence Nitori Holdings
2026年11月6日、当社が管理するシステムにおいて第三者による不正アクセスを確認しました
- Evidence BleepingComputer
may have stolen 37.62 million customer records
History
- First recorded 11 Nov, 01:43 UTC, as reported (one origin only).
Cite or reuse
The War Record, "Japanese retailer Nitori says a third party accessed one of its systems and up to 37.62 million records may have leaked", record ev-20261111-nt48, version 1, https://thewarrecord.com/events/ev-20261111-nt48/