Nitori Holdings says unauthorized access to a company-managed system may have exposed up to 37.62 million records belonging to customers, individual members and corporate members. The Japanese furniture retailer disclosed the incident in a November 9 notice after detecting the intrusion on November 6. The company said the records may have been leaked externally, while the total remains subject to further log analysis and data checks. BleepingComputer reported the disclosure on November 10.
Potentially affected information includes membership numbers, names, email addresses, postal addresses, phone numbers, dates of birth and gender. The notice also lists corporate-member details, including company and department names, representative information and contact details, as well as order data from Nitori Net and official Nitori shops on e-commerce marketplaces. Nitori said login passwords and credit card information are not included in the potentially exposed data.
The company said a review of access logs found that a third party may also have accessed its systems between mid-October and late October, before the intrusion was detected. Nitori said it blocked the unauthorized access, addressed vulnerable points and strengthened monitoring. It has not disclosed the entry point or cause of the incident, and an investigation with outside specialists is continuing.
Nitori said it will contact affected customers by email or post and has reported or consulted with Japan‘s Personal Information Protection Commission and police. The company warned that the exposed details could be used in impersonation emails, phishing attempts or suspicious phone calls.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
