Breaches · 6h ago
Nikkei says attackers used previously compromised credentials on October 7 to access its cloud development service and steal 1.83 million records. About 150,000 records included names, addresses, email addresses, phone numbers, and birth dates; 1.68 million contained information Nikkei says could not identify individuals.
The attackers signed in with credentials that had already been compromised, rather than exploiting a flaw in the service. That meant the service accepted a valid login from someone who was not the rightful account holder. Nikkei says it found no evidence of misuse as of October 16 and continues to investigate the scope.
Nikkei disclosed a separate Slack-account breach less than a year earlier, but the reporting does not link the incidents. For organizations using cloud development services, this breach shows how a stolen login can expose records the service can access, even without a software vulnerability.
2 sources covering this story
Hackers Steal 1.8 Million Records From Nikkei
The compromised information includes names, addresses, email addresses, phone numbers, and dates of birth.
Nikkei discloses third data breach in a month, 1.8M records exposed
disclosed a new data breach, the third in about a month, that exposed 1.83 million personal information records.
Part of the PlainSec briefing for 2026-10-20