Nikkei Suffers Another Cyberattack: Over 1.8 Million Records Exposed

The Japanese media conglomerate Nikkei, which owns the Financial Times and one of the country's largest business publications, has fallen victim to another cyberattack. According to an official statement from the company, hackers gained unauthorized access to its systems, leaving 1.83 million personal records vulnerable. This marks the third such incident the media group has recorded in the last month.

What actually happened?

The incident occurred on the morning of 7 October. Attackers used stolen credentials to infiltrate the company's internal development system. This breach provided access to databases stored on cloud servers. Nikkei representatives stated that the vast majority of the leaked information—specifically 1.68 million records—did not contain personally identifiable information. However, the remaining 150,000 records included sensitive data such as full names, email addresses, phone numbers, residential addresses, and dates of birth. The company emphasized that credit card information was not compromised in this attack.

A security crisis at the media giant

It is worth noting that this has been a difficult year for Nikkei regarding security. In September, the company reported that an employee's Microsoft 365 account had been hacked and used to distribute phishing emails. This followed an incident in July, where a compromised Google Workspace account allowed attackers to gain access to the personal information of employees and partners.

Currently, Nikkei's technical teams are investigating the causes of the breach. As of 16 October, the company has no evidence that the stolen information has been published online or misused. Furthermore, there have been no reports of system damage or service disruptions. The company stated that it will contact all individuals whose data was directly affected by the cyberattack in the coming days.

What does this mean for users?

Although Nikkei has already revoked the credentials used by the hackers and reported the incident to Japan's Personal Information Protection Commission, the event underscores the critical importance of cybersecurity. Large corporations that hold data on millions of people are frequent targets of sophisticated attacks. This serves as a reminder for users everywhere that activating two-factor authentication (2FA) and regularly updating passwords is essential to keeping accounts secure in the event of large-scale data leaks.