Nittai Kogyo: malicious files were placed on the server of its "N Trading" online shop, so 3,887 member records may have been viewed

1. 2026-01-08

   It found a malicious file on its contracted hosting server and stopped access to the shop. The investigation showed that some existing files had been tampered with and malicious files placed. [1] [3]

2. 2026-02-09

   Its parent Nissou Group announced the unauthorized access to the subsidiary and the possible leak of personal data. [2]

3. 2026-03-16

   It published a follow-up. Saying it cannot completely rule out that the data was viewed, it contacted by email the people it is legally required to notify. The shop is closed. [1] [3]

The member data that may have been viewed covers 3,887 records: names, company names, addresses, phone and fax numbers, email addresses, gender, occupation, dates of birth and purchase history. Passwords were stored encrypted, and credit card data is held by an external payment company, so it was not affected. No secondary harm has been reported. [1]

It removed the malicious files, restored the tampered files, blocked the entry route and analyzed logs, and reported to the police and the Personal Information Protection Commission. If it continues the shop, it plans to reopen after securing it. [1]