Nitori Holdings: intrusion may expose up to 37.62 million member and purchaser records

Unauthorized access to managed systems was detected and blocked on 6 November. Logs suggest possible earlier access in mid-to-late October. The ceiling of 37,620,000 records covers individual members, purchasers, corporate members and order data from Nitori Net and official marketplace shops; it is not a confirmed count of people whose data was stolen and may change. [1]

Potentially exposed fields include member numbers, names/readings, email and postal addresses, phone numbers, birth dates, gender, corporate/contact details and order data, with fields varying by person. Login passwords and credit-card data are excluded. Investigation of the entry route, scope and secondary harm continues; remediation of weak points and stronger monitoring are complete. [1]