Nikkei development cloud credentials stolen, leaking about 1.83 million personal data records

Nikkei Inc. announced on October 16 that a cloud service it uses for system development was accessed without authorization, leaking about 1.83 million personal data records as of that day ^[1]. The company says credentials for the cloud service were stolen and the access took place in the early hours of the 7th; about 150,000 records include a name, email, address, phone or birth date and about 1.68 million are identifiers that alone cannot identify a person, with no card data; Nikkei also disclosed two unauthorized account logins on October 4 ^[1][2]. Affected people should watch for individual notices from Nikkei, which has disabled the abused credentials ^[1].

Industries mainly affected: Media, entertainment & gaming

1. Watch for individual notices from Nikkei ^[1].
2. Organizations using cloud development environments should rotate and restrict access credentials .