English.Kyodonews Nomura and Bic Camera Hit by Data Breach Affecting Millions
Article Content
- •Nomura's system for institutional investors suffered unauthorized access, details on records affected are unclear.
- •Bic Camera reported a potential leak of 14.9 million customer records from a contractor's email system.
- •Both companies have suspended their services and are investigating the breaches.
Nomura Investor Relations Co. reported unauthorized access to its systems, leading to a data breach. The breach affects its information services for institutional investors and analysts, though the number of records compromised has not been disclosed. Concurrently, Bic Camera announced that approximately 14.9 million customer records may have leaked due to unauthorized access to a contractor's email distribution system. The leaked data includes personal information like names and email addresses, but no credit card details were involved. Both companies are investigating the extent of the breaches and have suspended affected services. Bic Camera's compromised system was managed by Arara Inc., and no secondary damage has been confirmed at this time.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track Airdo in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What customer data was leaked?
How many records are affected?
What actions are being taken?
Continue Reading
Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects… 
Volt Typhoon's Silent Train Network Targets US Critical Infrastructure The Chinese state-sponsored hacking group Volt Typhoon has been linked to a covert network called Silent Train, which has exploited at least four zero-day vulnerabilities over three years. This network utilizes rapidly rotating chains of compromised SOHO routers, IoT devices, and enterprise infrastructure to access…