Attackers used stolen credentials to enter a Nikkei development system early on October 7 and reach 1.83 million cloud-stored records; about 150,000 contain names, emails, addresses, phones or birth dates. It follows a July Google Workspace account compromise and a September Microsoft 365 hijack used for spear phishing.
What to do: Credentials revoked; regulator notified October 11; no misuse seen as of October 16.
· 29 days ago · 1.83 million records, 150,000 with identifiers · BleepingComputer
Why this score
Over a million records (impact 3), completed access (exploitability 2), media sector (criticality 0).