Nikkei Cyberattack Hijacks Employee Accounts, Sends 9,000 Spoofed Emails

Nikkei disclosed two breaches: unauthorized access to Google Workspace since late July that may have exposed names and contact details for 1,646 people, and a September 30 compromise of Microsoft 365 employee accounts used to send roughly 9,000 spoofed emails from legitimate addresses. The company reset passwords, contacted affected recipients, reported the incidents to Japan’s Personal Information Protection Commission, and continues investigating the scope of data exposure.