Nikkei Discloses Two Employee Cloud Account Compromises

Nikkei disclosed that unauthorized access to employee Google Workspace and Microsoft 365 accounts potentially exposed names and email addresses (about 1,646 and smaller sets) and that a compromised Microsoft 365 mailbox was used on September 30 to send ~9,000 phishing emails; the company reset passwords, notified recipients, reported the incidents to regulators, and is investigating while warning of possible follow-up phishing.