Third party breaches a Nitori system; up to 37.62 million member and shopper records may have leaked

Japanese furniture retailer Nitori Holdings said on November 9 that it confirmed unauthorized third-party access to a system it manages on November 6 and that up to 37.62 million records may have leaked, including names, email and postal addresses, phone numbers, birth dates and gender of members and shoppers, corporate member contact details, and order data from Nitori Net and its official marketplace shops ^[1][2]. Nitori says login passwords and credit card data are not among the possibly leaked information, and its investigation found the third party may have had access before November 6, with BleepingComputer reporting access likely since mid-October ^[1][2]. Nitori members and customers should watch for emails and calls impersonating Nitori, delivery firms or marketplaces and avoid unexpected links or attachments; Nitori will never ask for passwords, card numbers or PINs by email or phone ^[1].

Industries mainly affected: Retail