Nikkei discloses dual cyberattacks affecting Microsoft 365 and Google Workspace

Nikkei has disclosed two separate security incidents involving unauthorized access to its cloud-based business accounts.

In the first incident, attackers compromised Microsoft 365 accounts to send approximately 9,000 spoofed phishing emails on September 30. These messages, which contained links to malicious websites, were sent to both internal staff and external contacts, including news sources. The breach potentially exposed names, email addresses, and the contents of some messages.

In a second, separate incident, unauthorized access to Google Workspace accounts was discovered, which had been ongoing since late July. This breach may have compromised the personal information, including names and email addresses, of 1,646 employees and business partners.

Nikkei has since changed the affected passwords and reported that no further unauthorized logins have been detected. The company is investigating the scope of the leaks and has contacted affected recipients to request the deletion of suspicious emails.