Karaoke data breach in Japan may expose details of 8.6 million customers
Malware on a contractor's computer put the personal details of customers of Japan's biggest karaoke company at risk.
Customers of Japan’s largest karaoke company have been warned that their personal details may have been exposed. The problem started at Nippon Columbia Group (NCG), a contractor that handles customer information for Daiichi Kosho, the company behind popular karaoke chains in Japan.
What happened
According to BleepingComputer, NCG told Daiichi Kosho on October 5 that it had found malware on an employee’s computer. The affected system was isolated the next day.
The data on that system includes records for about:
- 8,631,000 customers
- 93,000 employees
Customers of these brands may be affected: BIG ECHO, MEGA BIG, Karaoke CLUB DAM, Banana Club, B-GARAGE and DK Dining.
What data was involved
- Full names
- Gender
- Dates of birth
- Email addresses
- Phone numbers
The company says passwords were not included. It also says it has not confirmed that any data was actually stolen or leaked, and that Daiichi Kosho’s own systems were not breached. The investigation is still continuing.
What the companies are doing
NCG has reset passwords and other login credentials and is investigating how the malware got in and how much data it could reach. The company says it has found no sign that customers’ loyalty points were misused.
Your data is only as safe as the weakest company that handles it, and that is often a contractor you have never heard of.
Why it matters, even outside Japan
This incident is a classic example of supply-chain risk. The karaoke company itself was not hacked. A partner that handled its customer data was. Many large breaches today happen this way, through marketing agencies, IT contractors or software suppliers.
Names, birthdays, emails and phone numbers might sound harmless, but criminals use them to make phishing messages look real. A message that uses your real name and birthday is much more convincing.
What affected customers should do
- Be careful with emails, text messages or calls that ask for payment, passwords or bank details, even if they mention karaoke or loyalty points.
- Do not click links in unexpected messages. Go to the official website or app directly instead.
- Turn on two-factor authentication for your important accounts.
- Watch for official updates from Daiichi Kosho as the investigation continues.
