Nitori breach: up to 37.62 million customer records may have leaked
Japanese furniture and home-goods retailer Nitori found an intruder in one of its systems on November 6. It says login passwords and credit card data were not involved.
In this brief: 3 sections 2 min read
Nitori confirmed unauthorized access to a system it manages on November 6, 2026, and cut it off. Log analysis suggests the access may have started in mid to late October. Nitori has reported it to Japan's Personal Information Protection Commission and the police, and the investigation continues.
Individual members and purchasers: member number, name, email, address, phone, date of birth, gender. Corporate members: company and contact details. Order information from Nitori Net and its online-mall shop. The mix differs by customer. Nitori says login passwords and credit card information were not included.
Treat unexpected messages claiming to be Nitori, a delivery firm or an online mall as possible scams. Don't open unfamiliar links or attachments, and don't reply. Nitori says it never asks for passwords, card numbers or PINs by email or phone, and will contact affected customers by email or post.