Nitori Holdings Reports Potential Data Breach Affecting 37.62 Million Records

Nitori Holdings announced a potential data breach affecting up to 37.62 million customer records, a disclosure that underscores the escalating cybersecurity risks facing consumer-facing businesses. The company detected unauthorized access to its systems on November 6th, 2026, and subsequent investigation revealed the potential compromise of a substantial volume of personal data.

The breached data includes a range of personally identifiable information (PII) such as membership numbers, names, email addresses, addresses, phone numbers, dates of birth, and gender for both individual and corporate members. Order information from purchases made through Nitori’s online platforms—Nitori.net and official shops on EC malls—was also potentially accessed. Crucially, the company states that credit card information and login passwords were not included in the exposed data. The sheer scale of the potential breach—affecting an estimated 37.62 million records—highlights the potential for widespread disruption and damage to customer trust.

Nitori has taken steps to contain the breach, including blocking the unauthorized access and engaging external cybersecurity experts to investigate the extent of the compromise and strengthen its systems. The company is notifying affected customers via email or postal mail and urging vigilance against potential phishing attempts and fraudulent activity. While Nitori currently anticipates a ‘limited’ impact on its consolidated financial results, the costs associated with remediation, legal liabilities, and reputational repair could prove substantial. The company is collaborating with the Personal Information Protection Commission and law enforcement authorities.

The incident arrives as the Indian equity market demonstrates upward momentum, fueled by domestic demand and foreign inflows, which may offset some of the negative publicity. However, the breach poses a material risk to Nitori’s brand reputation and customer loyalty, requiring a swift and effective response to mitigate potential long-term consequences. The company’s ability to restore customer confidence and prevent future incidents will be crucial in navigating this challenge.