Nitori, often called "the IKEA of Japan", runs 879 stores in Japan and another 219 in China, South Korea, Taiwan, Thailand, Singapore and Hong Kong. According to the company's notice, the incident affects individual customers, corporate members and people who ordered through its official stores and website without registering.
According to Nitori, members' passwords and credit card details were not exposed. The company blocked the access, fixed vulnerabilities and increased monitoring, and reported the incident to Japan's Personal Information Protection Commission and the police. It will notify affected customers by email or post.
What to do: Nitori warns that the data could be used for scams and phishing, and stresses it will never ask for a password, card number or PIN by email or phone. Customers should treat messages claiming to come from the company with suspicion.