Nitori Co., Ltd.

Companies / web services

Aliases / services: ニトリ / ニトリアプリ / ニトリネット / Nitori Co., Ltd. / 株式会社ニトリ
Official website: https://www.nitori.co.jp/

Sources identifying the operating company

https://www.nitori-net.jp/ec/userguide/contract/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Nitori app

Response status: Not listed
Response information checked: 2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

The 22 September 2022 update reported that passwords for potentially accessed Nitori app accounts were invalidated and users emailed on 20 September. Credential stuffing was suspected. This historical app response does not establish completion of current PHP remediation.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

If notified of invalidation and you have not reset it, reset through the official site. The notice advises avoiding former passwords and passwords reused on other services.

Official service URL

https://www.nitori.co.jp/

Source URLs

App unauthorized access update (22 September 2022)https://www.nitorihd.co.jp/news/items/316ab981c836f212f9b1063cf4bba2d2_1.pdfService and operation documentation

Related official sources

Official operator informationOfficial information directoryOfficial evidence identifying Nitori Co., Ltd. and the relevant business.
App unauthorized access update (22 September 2022)Official notice; link to this PHP incident unconfirmedThe 22 September 2022 update reported that passwords for potentially accessed Nitori app accounts were invalidated and users emailed on 20 September.