2026-11-10
Nitori unauthorized access: personal data of up to 37.62 million records may have leaked (names, addresses, phone numbers, birth dates) — what individual and corporate members should do
On November 9, 2026, Nitori Holdings Co., Ltd. announced that it confirmed unauthorized access by a third party to a system it manages on November 6, and that personal information held on its servers, up to 37.62 million records, may have leaked externally. The data covers individual members and purchasers at the Nitori Group (member number, name including furigana, email address, address, phone number, date of birth, gender), corporate members (member number, company name, department, representative's name, company address and phone number, and the contact person's name, email address and phone number), and order data placed through Nitori Net and the official Nitori shop on e-commerce malls. The company says login passwords and credit card information are not included. Third-party access may also have taken place from mid to late October, the route is under investigation, and the count may change. The company says it will contact affected customers by email or post in turn. As of November 10, 2026, no follow-up notice had been found. This site's conclusion: because address, phone number and name are all in the data, a call, text or email using the name of Nitori or a delivery company is not genuine just because it knows your correct address or order.