Nitori says up to 37.62 million personal information records may be at risk after unauthorized access

Japanese home furnishings company Nitori said on November 9, 2026, that up to 37.62 million personal information records may be at risk following a cybersecurity incident, according to IT Home.

An analysis found that a third party had accessed the company’s management system without authorization at least as early as mid-to-late October 2026. Identity information belonging to members and customers may have been exposed. Nitori said credit card information and login passwords were not involved.

Nitori has reported the incident to the relevant government agencies. It said it would review access controls, authentication, permissions management and monitoring in light of the investigation’s findings. The reported figure describes records potentially at risk, not a confirmed number of leaked records.

Source: ithome.com (originally published 2026-11-11 20:38 UTC+8)