Nikkei has disclosed another data breach involving stolen credentials, the third security incident the company has reported in roughly a month. Attackers accessed a development system and exposed around 1.83 million records.
About 150,000 of those records contained at least one direct identifier such as a name, email address, postal address, phone number or date of birth. The disclosure follows earlier compromises involving employee cloud accounts, making the pattern more important than any one incident on its own.
Repeated breaches often reveal weaknesses that cut across individual platforms. A stolen credential may begin in one service, but the real exposure can sit in the way accounts are recovered, sessions are maintained, tokens are issued or permissions are shared across systems.
Development environments deserve particular attention because they are often treated as less sensitive than production even though they may contain real data, integration secrets or trusted paths into live systems.
For organisations dealing with repeated identity-related incidents, the response should widen beyond password resets. Active sessions, application tokens, delegated access, recovery methods and cloud permissions all need to be checked for ways an attacker could persist.