Japanese publishing giant Nikkei said attackers breached two employee email accounts, using one to send thousands of phishing emails and exposing the names and email addresses of 1,646 individuals. The incidents affected Google Workspace and Microsoft 365 accounts, but Nikkei has not attributed them to any specific threat actor or confirmed whether the attacks are connected. #Nikkei #GoogleWorkspace #Microsoft365
Keypoints
- Attackers accessed a Nikkei employee’s Google Workspace account in late July.
- The breach may have exposed employee and business partner names and email addresses.
- In September, another employee’s Microsoft 365 account was compromised.
- The compromised account was used to send 9,000 phishing emails to staff and interviewees.
- Nikkei changed passwords, notified recipients, and warned of impersonation attempts.