Nikkei Inc. Serviço de nuvem para… · Breach

Nikkei confirms third data breach in a month; 1.83 million records

Oct 06, 2026 · 1 min read

Nikkei says that on the morning of October 7, 2026, hackers used stolen credentials to access a cloud service used for system development, leaking about 1.83 million items of personal data, with no credit card information. The company disabled the credentials, reported the breach to Japan's Personal Information Protection Commission on October 11, and as of October 16 had found no signs of data misuse, outages, or tampering. BleepingComputer counts it as the third breach disclosed in a month, and the scope review continues.

By HIFY Radar newsroom Updated 10/26/2026 01:34 PM Get this every day →← Back to the feed 5 sources

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

Nikkei, the Japanese media group behind The Nikkei and the Financial Times, says hackers used stolen credentials on the morning of October 7, 2026, to access a cloud service used for system development. About 1.83 million items of personal data leaked; roughly 150,000 included names, addresses, email addresses, phone numbers, or dates of birth. No credit card data was exposed, the company says.

Why it matters

Users of group services, including about 800,000 Nikkei BP users, had data exposed. As of October 16, Nikkei found no signs of data misuse, outages, or tampering, but the scope review continues. BleepingComputer counts it as the third breach disclosed in a month, raising reputational and regulatory risk.

What to do

Nikkei disabled the stolen credentials and will notify affected individuals directly. In your company, review how development environments reach real customer data, enforce multifactor authentication on cloud accounts, and monitor for anomalous credential use.

For the technical team

Affected: Nikkei Inc. Serviço de nuvem para desenvolvimento da Nikkei (dados de usuários da Nikkei e do grupo, como Nikkei BP) · Personal data stored in the cloud service: about 1.83 million items (as of October 16), of which about 1.68 million contained only data that cannot identify an individual and about 150,000 contained name, address, email, phone, or date of birth (120,000 included an email address). Nikkei BP: about 800,000 items, of which about 50,000 with name, email, address, phone, or birth date and about 750,000 with identifiers only. No credit card data.
Exploitation: Exploitation confirmed by the victim: unauthorized access on October 7 using previously compromised credentials. As of October 16, Nikkei found no signs of data misuse, system outages, or data tampering.
Fix: Stolen credentials disabled immediately after the breach was identified. No product patch applicable; review of the scope and of the compromised data continues, with additional measures if necessary, the company says.
Vector: Nikkei cloud service used for system development; attackers used previously stolen authentication credentials, obtained by unspecified means, on the morning of October 7, 2026. Exploitation condition: possession of valid credentials; no software vulnerability cited in the sources.
More details: Nikkei reported the case to Japan's Personal Information Protection Commission on October 11, announced it on October 16, and Nikkei BP detailed its roughly 800,000 items on October 21. BleepingComputer counts it as the third breach disclosed in a month. Prior incidents cited by SecurityWeek and Security Affairs: a May 2022 ransomware attack and a November 2025 breach from a compromised Slack account. Affected individuals will be notified individually.