Japanese media company Nikkei disclosed two separate cyberattacks on employee accounts. In the more recent incident, an attacker compromised a Microsoft 365 account and sent approximately 9,000 phishing emails on September 30 to people both inside and outside the company, including journalistic sources. The malicious emails contained links to dangerous websites and targeted individuals who had previously communicated with Nikkei staff. The company changed the account password, detected no further unauthorized access, and contacted recipients. The breach potentially exposed recipient names, email addresses, and some email contents.
An earlier incident involved unauthorized access to a Google Workspace account used by another employee beginning in late July, potentially compromising personal information of 1,646 people including employees and business partners. Nikkei discovered the intrusion in August after receiving a Google alert. The company found no evidence of subsequent unauthorized logins or misuse of exposed information. These cyberattacks are part of a broader pattern of security breaches affecting major Japanese companies recently, including Daiwa Securities, Yamato Transport, Dai-ichi Life, Sagawa Express, and Ikegami Tsushinki.
Source: Read the full story at The Record
This summary was written with AI assistance from the linked source.
Send this to yourself, or to someone who should see it
Enter your email and we will send you a link to this article.
