A massive malware incident at Nippon Columbia, a Japanese entertainment company, has left over 8.6 million customer and employee records exposed, sparking concerns about potential data theft or leaks. The incident is particularly alarming given the sheer scale of affected individuals, who include fans of karaoke venues operated by Daiichi Kosho, one of Japan’s largest entertainment system makers.
Nippon Columbia serves as a contractor for Daiichi Kosho, handling personal information on behalf of the company. On October 5, Daiichi Kosho was informed that malware had been discovered on an employee’s computer at Nippon Columbia, prompting the affected system to be isolated the following day. Although Daiichi Kosho has not confirmed any data theft or leaks, it is advising customers to remain cautious due to the potential risk.
The exposed data includes records for 93,000 employees and a staggering 8,631,000 customers, containing sensitive information such as full names, dates of birth, email addresses, telephone numbers, and genders. The incident may impact customers of several Daiichi Kosho-owned karaoke venues, including BIG ECHO, MEGA BIG, Karaoke CLUB DAM, Banana Club, B-GARAGE, and DK Dining.
It is worth noting that the exposed data does not include passwords or loyalty points, which may alleviate some concerns about unauthorized use. However, the incident highlights the importance of being vigilant in protecting personal information from malicious actors. The general recommendation is to be suspicious of unsolicited communication requesting payments or sensitive personal or financial information via email, SMS, or phone calls.
Daiichi Kosho has stated that its own systems were not breached, and Nippon Columbia’s contractor has reset passwords and authentication credentials as part of the investigation into the cause and scope of the incident. Unfortunately, it appears that NCG has not made any public announcement about this security incident, leaving many questions unanswered.
For those affected by the incident, it is essential to remain cautious when receiving unsolicited communication or requests for sensitive information. By being vigilant and taking proactive steps to protect personal data, individuals can significantly reduce their risk of falling victim to potential scams or malicious activities.
Source: Bleeping Computer — 2026-10-11