Skip to content
Data Breach Exposes Personal Info of 8.7 Million Karaoke Customers

Data Breach Exposes Personal Info of 8.7 Million Karaoke Customers

First seen 12 Oct 2026, 09:31 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 12, 2026 at 10:29 UTC
  • •Over 8.7 million customer records potentially exposed due to malware.
  • •Affected data includes personal details but not passwords.
  • •Customers are advised to be vigilant against phishing attempts.

Daiichi Kosho, a major Japanese karaoke operator, reported a data breach linked to Nippon Columbia Group (NCG), which may have exposed personal information of over 8.7 million customers and employees. The breach was caused by a malware infection discovered on an employee's device between October 1 and 2, 2026, with the affected system isolated on October 2. Daiichi Kosho was informed of the incident on October 5. The exposed data includes names, genders, birth dates, email addresses, and phone numbers, but not passwords. Customers are advised to be cautious of phishing attempts. The breach primarily affects users of Big Echo and DK Dining brands. NCG has reset passwords and is investigating the incident further. No evidence of unauthorized use of loyalty points has been reported.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-01
Malware infection discovered
A malware infection was found on an employee's device at Nippon Columbia Group, leading to a data breach.
Infosecurity-Magazine
2026-10-02
Affected system isolated
The infected device was isolated from the network to prevent further data exposure.
Infosecurity-Magazine
2026-10-05
Incident reported to Daiichi Kosho
Nippon Columbia Group informed Daiichi Kosho about the breach and its potential impact on customer data.
Bleepingcomputer
2026-10-08
Public disclosure of breach
Daiichi Kosho publicly disclosed the data breach, warning customers of potential phishing risks.
Infosecurity-Magazine

More articles in this cluster (2)

Following this threat?

Track Big Echo in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (9)

1 / 3

Common questions

What personal information was exposed?
The exposed data includes names, genders, dates of birth, email addresses, and phone numbers.
Are passwords compromised?
No, the exposed data does not include passwords.
What should affected customers do?
Customers should be vigilant against phishing attempts and avoid clicking on suspicious links or attachments.