Nikkei: staff Microsoft 365 compromise may have leaked recipient data and sent about 9,000 malicious emails

Possible data leak: Staff Microsoft 365 accounts were compromised; about 9,000 spoofed emails were sent. Recipient emails/names and some message content appear leaked. Malicious mails on Sep 30, 2026; passwords reset; no further logins seen. Counts under review. Disclosed Oct 4.