Nikkei discloses two cyberattacks targeting employee email accounts

Nikkei reported two incidents: on September 30 an attacker used a compromised Microsoft 365 account to send roughly 9,000 phishing emails, including to journalistic sources. A separate Google Workspace account was accessed from late July, potentially exposing data of 1,646 people.

• ~9,000 phishing emails sent from a compromised Microsoft 365 account on September 30
• Google Workspace breach may have exposed data of 1,646 employees and partners
• Nikkei changed passwords and notified Japan's data protection authority
• Neither incident has been attributed to a specific hacking group