Nitori Holdings said up to 37.62 million customer records may have leaked.^[1] Nitori is a major Japanese furniture and home accessories retailer.^[2] Unauthorised access to its systems was the cause.^[3] Three weeks inside Nitori detected the unauthorised access on 6 November.^[4] The attacker likely had access from the middle of October.^[5] That is about three weeks between entry and discovery. The company blocked the access once it was found.^[6] What was exposed The exposed data includes customers' email and home addresses.^[7] Login passwords and credit card information were not compromised.^[8] What customers face An email address joined to a home address is enough to write a convincing fake message. Nitori warned customers of possible phishing and scam attempts.^[9] It will contact those affected by mail or email.^[10] It has notified the Japanese authorities.^[11] A second Japanese leak the same day The same report carried another disclosure. Sega reported that around 2.2 million customer email addresses were leaked.^[12] That leak came from a compromised system at a third-party contractor.^[13] No fraudulent use of the Sega data has been confirmed.^[14]