Nitori Holdings said the company discovered on November 6 that the management server for its official online shopping site had been accessed without authorization.

The major home furnishing retailer said there is a possibility that online customers’ personal data such as names, email addresses and home addresses may have been leaked, affecting as many as about 37.62 million records.

The company said data such as credit card information and passwords were not included among the potentially leaked data.

Nitori is warning customers that the leaked personal information could be misused for spoofed emails, phishing scams and suspicious phone calls.

It is urging online shopping site members not to open unfamiliar links or email attachments.