Nitori, Japan's largest furniture retailer, says intruders may have taken up to 37.62 million customer records

official (Nitori Holdings notice, Nov 9, 2026); counts are records, not people, and may change as the investigation continues2026-11-10

Data that may be exposed: individual members and purchasers (member number, name with reading, email, address, phone, date of birth, gender); corporate members (company name, department, representative, company address and phone, contact person's name, email and phone); and order data from Nitori Net and Nitori's official shops on e-commerce marketplaces. The combination differs per customer.
What Nitori did: blocked the access, says it fixed the weak point and strengthened monitoring, and is working with outside specialists. Affected customers will be contacted by email or post.
Phishing risk: Nitori warns that the data could be used for impersonation emails and calls posing as Nitori, delivery companies or marketplaces, and says it never asks for passwords, card numbers or PINs by email or phone.