Nitori, a prominent Japanese furniture retailer, has identified a significant data breach involving the unauthorized access to approximately 37.62 million customer records, according to Bleeping Computer.
The intrusion was detected on Nov. 6, though investigations suggest the unauthorized party gained access to company systems in mid-October. The breach impacts individual customers, corporate members, and those who placed orders through Nitori online shops. Potentially exposed data includes names, email addresses, postal addresses, telephone numbers, dates of birth and membership details.
Corporate records, including company names and contact information, were also compromised. The company confirmed that customer passwords and credit card information remain secure. Nitori operates 879 stores in Japan and 219 locations across other Asian markets, generating $5.8 billion in annual revenue. Following the discovery, the retailer blocked the attacker, addressed system vulnerabilities, and enhanced threat monitoring.
Nitori has notified the Personal Information Protection Commission and local law enforcement. Impacted individuals are being contacted directly and warned to remain vigilant against potential phishing attempts or scams. The company emphasized that it will never request passwords or payment details via email or telephone. Nitori continues to investigate the incident to prevent future security lapses.
Source: Bleeping Computer
