Nitori Holdings said on the 9th that personal data on up to 37.62 million people may have leaked after unauthorized access to a system the furniture giant manages itself, one of the largest retail breaches on record in Japan.
The data at risk includes Nitori Group membership details: names, addresses, email addresses, dates of birth and gender. Corporate members' company addresses and the names of their representatives may also have been exposed.
Purchase histories from the company's stores, its official website and its online shopping service are also believed to be included, the company said.
Credit card details and login passwords for the site were not among the data, according to Nitori.
Access traced to mid-October
Nitori confirmed the breach on Nov. 6. Unauthorized access may have occurred between mid-October and late October.