Skip to content
Nitori Reports Data Breach Affecting 37.6 Million Customer Records

Nitori Reports Data Breach Affecting 37.6 Million Customer Records

First seen 10 Nov 2026, 22:19 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 10, 2026 at 22:20 UTC
  • •Nitori confirmed a data breach affecting 37.62 million records.
  • •No login passwords or credit card information were compromised.
  • •The company is enhancing security measures and warning customers about phishing risks.

Nitori, a leading Japanese furniture retailer, announced on November 9, 2026, that hackers accessed its systems, potentially compromising 37.62 million customer records. The unauthorized access was confirmed on November 6, and investigations suggest the breach may have occurred from mid-October. Affected data includes names, email addresses, postal addresses, and phone numbers of individual and corporate customers, but login passwords and credit card information were not compromised. Nitori has taken steps to block the attacker and is enhancing its security measures. The company has warned customers about potential phishing attacks and will notify those affected directly. Nitori has reported the incident to Japan’s Personal Information Protection Commission and other authorities.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-11-06
Unauthorized access confirmed
Nitori confirmed unauthorized access to its systems, leading to a potential data breach affecting millions of records.
Straitstimes
2026-11-09
Public announcement of breach
Nitori publicly announced the data breach, revealing the scale and nature of the compromised information.
Straitstimes
2026-11-09
Investigation findings released
Investigation indicated that the breach likely occurred between mid-October and early November.
Bleepingcomputer

More articles in this cluster (3)

Following this threat?

Track Nitori in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (13)

1 / 4

Common questions

What customer information was compromised?
The breach may have exposed names, email addresses, postal addresses, and phone numbers, but not passwords or credit card information.
How is Nitori responding to the breach?
Nitori has blocked unauthorized access, is enhancing security measures, and will notify affected customers.
What should affected customers do?
Customers are advised to be cautious of phishing attempts and to monitor their accounts for suspicious activity.