Nikkei Data Breach After Cloud Access Credentials Were Misused
Nikkei announced unauthorized access to a cloud service used for systems development. The incident involves approximately 1.83 million records, some of which contained personal information.
The Nikkei data breach involves approximately 1.83 million records following unauthorized access to a cloud service used for systems development. The company said the attacker used stolen login credentials. Access occurred on October 7, 2026, and Nikkei disclosed the incident on October 16.
According to the published information, approximately 150,000 records contained at least one piece of personal information. This may have included a name, email address, mailing address, telephone number, or date of birth. About 120,000 records contained an email address.
The remaining approximately 1.68 million records consisted of identifiers that do not by themselves allow a specific person to be identified. Nikkei also did not report any payment card data leak.
Nikkei data breach through stolen credentials
The confirmed entry point was stolen login credentials for the cloud service. This was therefore not a confirmed exploitation of a known software vulnerability. The company invalidated the compromised credentials and is continuing to investigate the circumstances of the incident.
Nikkei said it would contact affected individuals individually. A notice from Nikkei HR Group also confirms that the event may affect some users of its services.
Risk of targeted fraudulent communications
Data such as a name, email address, or telephone number may increase the risk of targeted phishing and fraudulent communications. However, the published information itself does not confirm that the leaked data have already been published, sold, or misused.
Affected users should pay increased attention to unexpected messages, especially those referring to Nikkei or requesting a login, payment, or additional information. Users should not use the same login credentials across multiple services.
Third recently disclosed incident
According to secondary reporting, this is Nikkei’s third security incident disclosed over approximately one month. However, it has not been confirmed whether this case is related to the group’s previous email account compromises.
The attacker’s identity and the method used to obtain the access credentials remain unknown. The investigation has also not determined whether the number or scope of affected records will change.
What may happen next
- Nikkei may provide more precise figures for affected individuals and categories of leaked data.
- The investigation is expected to clarify the origin of the stolen login credentials.
- It will also be important to confirm whether the data were subsequently published or misused.
- Additional information may come from Japan’s Personal Information Protection Commission or companies within the Nikkei group.
Sources
- INTERNET Watch – Reports Nikkei’s October 16 announcement, the time of unauthorized access, the scope of 1.83 million records, and the breakdown of the data.
- BleepingComputer – Corroborates the incident’s scope, the use of stolen credentials, access invalidation, and the context of previous incidents.
- Nikkei HR, Inc. – Confirms that following Nikkei’s announcement, the incident may also affect some users of Nikkei HR services.
Verified and updated: October 20, 2026 15:24
