← Nikkei

2026 Nikkei — two employee cloud-mail breaches; 1,646 PII + ~9,000 phishing emails

2026 10.6K records affected Share on X

Data compromised

Google Workspace incident: names and email addresses of ~1,646 employees/business partners (not readers/interviewees census as readers). Microsoft 365 incident: outbound phishing to internal staff and interviewees; may have exposed recipient names/emails and some mailbox contents. Reported to Japan DPA; exact second-incident PII count still being determined.

Technical writeup

Verified company notices — Nikkei Inc. disclosed two employee cloud-mail compromises over the weekend of Oct 4–5, 2026. (1) Late July unauthorized access to an employee Google Workspace account exposed personal information of employees and business partners; Nikkei reset the password after Google notified it in early August; ~1,646 individuals’ names/emails may have been exposed; readers/interviewee databases not in that census. (2) September unauthorized access to an employee Microsoft 365 account used on Sep 30 to send ~9,000 phishing emails with malicious links to internal staff and interviewees; passwords changed; no further unauthorized logins confirmed; recipients contacted to delete messages. Company has not attributed a named threat actor or confirmed the two incidents are linked. recordsAffected 10646 approximates 1,646 + 9,000 impacted contacts/recipients; companyConfirmed true.

Root cause

Unauthorized access to an employee Google Workspace account (late July; discovered early Aug) and a separate Microsoft 365 account (September) used to send ~9,000 phishing emails on Sep 30.

References