# Nitori Holdings Reports Massive Data Breach Affecting 38 Million Customers Unauthorized access exposed millions of customer records including email and home addresses in Japan. - **Source:** [The Straits Times – Asia](https://www.straitstimes.com/asia) - **Published:** 2026-11-09 - **Topic:** [Business](https://brifing.si/c/business) - **Original article:** - **On Brifing:** https://brifing.si/s/eb7da9ee-1809-4d6f-9a29-b6780b76fd21 ## Massive Data Exposure Confirmed Nitori Holdings, a prominent Japanese home furnishings retailer, announced a significant data breach involving up to 37.62 million customer records. The company confirmed the unauthorized access on November 6, following an internal review. This incident ranks among the largest data security failures reported by a Japanese corporation in recent months. ## Scope of Compromised Information The leaked data primarily consists of email addresses and home addresses belonging to Nitori Group members and online shoppers. Fortunately, the company clarified that sensitive login passwords and credit card information remained secure and were not compromised. Customers are advised to remain vigilant regarding potential phishing attempts or suspicious communications. ## Timeline of Security Breach A third-party investigation commissioned by the retailer determined that the unauthorized access occurred between mid-October and late October. Nitori identified the breach shortly after these events transpired. The company is currently working to notify all affected customers directly through official mail or email channels to ensure comprehensive public awareness. ## Rising Phishing Risks Following the disclosure, Nitori warned its customer base to be extremely cautious regarding phishing attempts and unsolicited phone calls. Because email addresses were exposed, malicious actors could potentially use this information to craft targeted social engineering attacks. The retailer emphasizes that it will only contact users through verified official communication channels. ## Broader Japanese Security Context This incident highlights a growing trend of cybersecurity vulnerabilities within major Japanese firms. The announcement coincided with a separate data breach at gaming giant Sega, which saw 2.2 million email addresses leaked. These events underscore the persistent threat landscape facing large-scale retailers and digital service providers operating within the Japanese market. ## Sega Contractor Breach Comparison The Sega breach occurred through a third-party contractor named Arara, which manages newsletter distributions for the gaming company. While the Nitori and Sega incidents differ in scale and origin, both highlight the risks associated with external system dependencies. Neither company has reported confirmed fraudulent use of the leaked customer information yet. ## Corporate Response and Mitigation Nitori is prioritizing the containment of the breach and the protection of its remaining digital infrastructure. By engaging third-party investigators, the firm aims to identify specific entry points used by unauthorized parties. The company continues to monitor its systems closely to prevent further unauthorized access and restore full data integrity. ## Future Security Implications This event serves as a critical reminder for retailers to bolster their cybersecurity protocols regarding customer databases. As digital shopping grows, the protection of personal contact information becomes as vital as securing financial data. Nitori must now navigate the reputational impact while reinforcing its defenses against future sophisticated cyber threats. ## Sources covering this story - https://www.straitstimes.com/asia/east-asia/japanese-home-retailer-nitori-says-up-to-38m-customer-records-may-have-leaked — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._