Nitori says up to 37.62 million records may have leaked
Nitori, a Japanese furniture retailer, reported unauthorized access that may have exposed up to 37.62 million records with names, contacts, birth dates and order data. Login passwords and card data are out of scope, and the figure is not a confirmed count of people. Exposed personal data enables scams; customers should distrust contacts citing these details.
What happened
Nitori, a Japanese furniture and home goods retailer, reported unauthorized access that may have exposed up to 37.62 million records. Potential scope includes names, contacts, birth dates and order data. Login passwords and card data are excluded, according to the company.
Why it matters
The potential volume is very large, though the company says the figure is not a confirmed count of people. Exposed personal data enables scams and fraudulent contact in Nitori's name. Passwords and cards out of scope limit direct financial fraud risk.
What to do
Await Nitori's official guidance and possible customer notifications. Advise customers and staff to distrust emails and calls citing order details. Monitor support channels for fraud attempts.
For the technical team
- Affected
- Nitori, varejista japonesa de móveis e artigos para o lar; até 37,62 milhões de registros em potencial escopo · Nitori customer records (Japanese furniture and home goods retailer): up to 37.62 million records in potential scope, including names, contacts, birth dates and order data.
- Exploitation
- Breach disclosed by Nitori itself after unauthorized access. No confirmed count of people, no mention of actors or active exploitation.
- Fix
- Not applicable for a data breach; login passwords and card data are out of scope.
- Vector
- Unauthorized access to Nitori systems; the intrusion method was not described in the source.
- More details
- Source: DailyDarkWeb post on X citing Nitori's statement. The record count is potential, not confirmed, and the unauthorized access was acknowledged by the company.
Timeline
Incident opened.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb
