Overview
Unauthorised access was confirmed November 2. Fields include names, email, phones and employer details, varying by registration. Approximate category counts are not added; the numeric field is NULL. MIR@I on the same server was suspended as a precaution; no unauthorised access to it had been confirmed as of November 6.
Timeline
- Occurred
- Discovered
- Disclosed
Unauthorised access confirmed.
Data leak disclosed.
Second report disclosed category counts.
Organization response
The company suspended services, investigated with external experts, notified affected people and warned about impersonation.
What you can do
Verify notices through official channels, avoid links or attachments in unexpected messages, and do not provide credentials or account details.
Sources
- 同件第二報野村インベスター・リレーションズ · 2026-11-09
- 機関Naviへの不正アクセスおよび情報漏えい野村インベスター・リレーションズ · 2026-11-09