Malware at Daiichi Kosho contractor exposes 8.7 million customer and employee records
Summary
Malware found on contractor Nippon Columbia’s system exposed records for 8.63 million Daiichi Kosho customers and 93,000 employees. Data theft has not been confirmed; the contractor reset credentials and is investigating.
Key points
- Nippon Columbia discovered malware on an employee’s computer on October 5 and isolated the system the following day.
- The exposed records cover 8.63 million customers and 93,000 employees.
- Data included names, genders, birth dates, email addresses, and phone numbers; passwords were not included.
- Daiichi Kosho has not confirmed data theft or leaks, and says there is no evidence of unauthorized use of loyalty points.
- Daiichi Kosho says its own systems were not breached; Nippon Columbia reset passwords and other authentication credentials and is investigating.
- The company advised customers to watch for unsolicited messages or calls seeking payments or sensitive information.
Article Details
- Victim Organization
- Nippon Columbia (contractor); Daiichi Kosho customer and employee records were affected
- Incident Type
- Malware infection on an employee's computer at Nippon Columbia, with potential exposure of customer and employee records
- Disclosure Date
- 2026-10-11
- Data Types Exposed
- Full names
- Genders
- Dates of birth
- Email addresses
- Telephone numbers
- Affected Records
- 8,724,000 total: 8,631,000 customer records and 93,000 employee records
- Operational Impact
- Nippon Columbia discovered malware on an employee's computer and isolated the affected system the following day. Daiichi Kosho said its own systems were not breached. NCG reset passwords and other authentication credentials and is investigating the incident.
- Ransom Or Extortion
- None reported.
- Claim Status
- claimed