GoKawiilNitori discloses breach exposing up to 37.6 million customer records
Japanese retailer Nitori detected unauthorized access to one of its systems on November 6, 2026, but an investigation found the intruder likely had access since mid-October. The company says up to 37.62 million records belonging to individual members, corporate members, and online shoppers may have been exposed, including names, addresses, phone numbers, dates of birth, and order details. Nitori confirmed that passwords and credit card data were not compromised.
GoKawiil's interpretation of the reporting above, not reported fact.
The roughly three-week gap between initial access and detection suggests the attacker may have had extended opportunity to explore or exfiltrate data before being blocked. Because Nitori operates nearly 1,100 stores across Asia with $5.8 billion in annual revenue, a breach of this scale could affect a large cross-section of its customer base in multiple countries, raising exposure to phishing or identity-theft attempts even without financial data being stolen.
- Up to 37.62 million customer records may have been exposed in the breach.
- Attacker access reportedly began in mid-October but was only detected on November 6.
- Passwords and credit card details were not compromised, according to Nitori.
Source: bleepingcomputer.com, 2026-11-10
Published there as: “Japanese furniture giant Nitori says hackers stole 37.6M customer records”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.