---
id: "CMP-202611-na4m7r"
page: "https://infrastack.ai/live/CMP-202611-na4m7r"
kind: "campaign"
aliases: []
title: "Japanese furniture retailer Nitori breached: names, addresses, emails, phone numbers and birth dates in up to 37.62 million customer records may be stolen; expect scams posing as Nitori"
severity: "medium"
cvss: null
epss: null
exploited: false
status: "open"
category: "vendor"
products: [{"name": "Nitori", "note": "Nitori Group loyalty members and online purchasers; access mid-Oct to 6 Nov 2026", "fixed": [], "ecosystem": "saas"}]
ecosystems: []
tags: ["campaign", "early-warning"]
not_affected_if: []
published_at: null
first_seen_at: "2026-11-10T20:57:23+00:00"
updated_at: "2026-11-10T20:59:15+00:00"
sources: [{"source": "analyst", "url": "https://cybersixt.com/originals/nitori-says-attackers-may-have-taken-37-62-million-customer-records", "first_seen_at": "2026-11-10T20:57:23+00:00", "cites": ["https://cybersixt.com/originals/nitori-says-attackers-may-have-taken-37-62-million-customer-records"]}]
exploit_sources: []
---

# Japanese furniture retailer Nitori breached: names, addresses, emails, phone numbers and birth dates in up to 37.62 million customer records may be stolen; expect scams posing as Nitori

Link for people: https://infrastack.ai/live/CMP-202611-na4m7r (this .md is for agents)

Nitori Holdings, Japan's largest furniture and homeware retailer, disclosed on 9 Nov 2026 (customer notice and Tokyo Stock Exchange filing) that a third party accessed a system it manages. It confirmed the access on 6 Nov and cut it off. Logs show access may have started earlier, mid to late October 2026. Up to 37.62 million records of loyalty members and purchasers (individual and business) may be exposed: member number, name (with kana reading), email, postal address, phone number, date of birth and sex. For business members, company names and department details too. Nitori says login passwords and credit card data were not taken. How the attackers got in is still under investigation and the record count may change. Attacker: unknown.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- saas:Nitori affected range not listed fixed no fixed version listed

## Cause

How the attacker got in: not disclosed yet (unknown). The record says how the attackers got in is still under investigation, while customers are warned of phishing emails and calls that use the stolen data.

How it reached others: their users got messages abusing it (phishing).

Last month's incidents with the same cause, and the full checklist: https://infrastack.ai/live/causes.md#phishing

## How to check

- Are you or your company a Nitori member, or have you bought from Nitori online? Then your details may be in the stolen data.
- Nitori warns of phishing emails and suspicious phone calls that use the stolen data. Treat any message or call claiming to be Nitori, about this breach, compensation or your account, as suspect. Nitori says it will contact affected customers by mail or email.
- Sender and link domains used by scammers: unknown.

## Fix

- Do not click links in or reply to unexpected Nitori-themed emails, texts or calls. Check them on Nitori's official site instead.
- Watch for targeted phishing that uses your name, address, phone number or birth date.
- Passwords and card data were not reported stolen, but change your Nitori password if you reuse it elsewhere.

## Timeline

- 2026-11-10T20:57:23+00:00 analyst https://cybersixt.com/originals/nitori-says-attackers-may-have-taken-37-62-million-customer-records

## Documents

- [describes] @BleepinComputer: Japanese furniture giant Nitori says hackers stole 37.6M customer records
https: https://x.com/BleepinComputer/status/2120258997324218582
- [describes] Nitori says attackers may have taken 37.62 million customer records https://cybersixt.com/originals/nitori-says-attackers-may-have-taken-37-62-million-customer-records

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_