Nitori says up to 37.62 million records may have leaked
The Japanese retailer says it blocked unauthorized access on 6 November and will contact affected customers by email or post.
The Japanese retailer says it blocked unauthorized access on 6 November and will contact affected customers by email or post.

Nitori Holdings, a Japanese furniture and home accessories retailer, said on 9 November that up to 37.62 million personal information records may have leaked after unauthorized access to a company system. The figure is a maximum number of potentially exposed records, not a confirmed number of affected customers or stolen records.
Nitori said it detected and immediately blocked the access on 6 November. It also found that unauthorized access may have occurred from mid- to late October, and is examining the details.
The potential exposure covers individual and corporate members and non-members who purchased through Nitori stores and online shops. Information about individual members and purchasers may include membership numbers, names and their phonetic readings, email and postal addresses, phone numbers, dates of birth and gender. The combination varies by user.
Corporate records may include membership numbers, company and department names, representatives’ names, company addresses and phone numbers, and contact persons’ names, email addresses and phone numbers. Order information from Nitori Net and official Nitori shops on online marketplaces may also be affected. Nitori said login passwords and credit-card information were not included in the potentially exposed data.
Nitori said it addressed system vulnerabilities and strengthened monitoring after blocking the access, BleepingComputer said. The company also informed Japan’s Personal Information Protection Commission, the police and other authorities.
The company warned that the information could be used in impersonation emails, phishing scams or suspicious calls posing as Nitori, delivery companies or online marketplaces. Phishing is an attempt to trick someone into giving up information or opening a malicious link. Nitori advised customers not to open unfamiliar links or attachments and said it will never ask for passwords, credit-card numbers or PINs by email or phone.

Nitori is working with outside specialists to investigate the cause, entry route, extent of the incident and whether any secondary harm occurred. It said it will contact affected customers progressively by email or post and promptly disclose any newly established matters that warrant a public announcement.
Governor Kathy Hochul launched the center at Binghamton University as the state opened a registration portal for large developers. Both prepare for RAISE Act requirements beginning 1 January 2027.
3 min

Davidson says he has joined OpenAI to work on the future of travel. Odessia’s travel-agent tool has shut down.
1 min

Airbus Defence and Space and Thales Alenia Space will build two IRIS observation satellites to progressively replace France’s three current CSO satellites.
2 min