Nikkei Business Daily, Security NEXT and BleepingComputer reported a data breach at Nitori Holdings (Japan) on 9 November 2026, and it has been confirmed. It affected 37,620,000 customers.
What we know as of
Status
Confirmed.
People affected
37,620,000 customers.
What was exposed
Email addresses, Phone numbers, Dates of birth, Names, Addresses, Member numbers, Gender and Company names.
When
First reported 9 November 2026.
How
Hacking.
Nitori Holdings’s record
No earlier breach on record under this name.
Not known yet: when it began and who was behind it. This page is updated as notices and statements come in.
Every fact above has its source below. Journalists: free to quote with credit (“Privacy Unpacked data breach tracker”, with a link to this page and the date); the figures can move. Follow this breach (feed) · Every major breach · Ask us for a figure
People affected
37,620,000customers
Reported
9 November 2026News report and 3 more
Who is affected
Japan, China, South Korea, Taiwan, Thailand, Singapore, Hong Kong SAR China
What was exposed 9
Email addresses
Phone numbers
Dates of birth
Names
Addresses
Member numbers
Gender
Company names
Membership numbers
How it happened
How
Hacking Confirmed unauthorized accesssourceOur translation from Japanese不正アクセスを確認し
News reports are read by an AI model; every fact taken from an article was checked word for word against it, and anything it could not find was dropped. · Corrections and changes
Nikkei Business Daily, Security NEXT and BleepingComputer reported a data breach at Nitori Holdings (Japan) on 9 November 2026, and it has been confirmed. It affected 37,620,000 customers. How it happened, by the sources: hacking.
What data was exposed in the Nitori Holdings breach?
Email addresses, Phone numbers, Dates of birth, Names, Addresses, Member numbers, Gender, Company names and Membership numbers, by the notices and reports on this page.
How do I know if I was affected?
Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.
Is there a Nitori Holdings data breach settlement?
No settlement open for claims is on record for Nitori Holdings as of 15 November 2026. Every open settlement is listed with its deadline.
Is a letter, email or text about the Nitori Holdings breach real or a scam?
A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to Nitori Holdings’s own site, or check the letter here.
Privacy Unpacked