TokyoA hijacked Nikkei account sent about 9,000 phishing emails, including to journalistic sources.
The breach may have exposed recipients’ names, email addresses and some email contents.
The attacker hijacked an employee’s Microsoft 365 account and sent malicious links on 30 September to past contacts.
A separate Google Workspace breach since late July may have exposed 1,646 people, but not sources, Nikkei says.
Nikkei is still counting victims for Japan’s data protection authority, and no group is blamed.
How each outlet framed it
- The Record
- details targeting of journalistic sources via 9,000 phishing emails sent September 30, breaches include source contact data
Sources: The Record