According to INTERNET Watch, Japan's Daiichi Kosho announced on October 8 that a PC of an employee at Nippon Columbia Group, which handles personal data on its behalf, was infected with malware on October 1-2, putting names, gender, birth dates, emails and phones of about 8,724,000 Big Echo and other store members and staff at risk, without passwords [2]. November 6 forensic findings confirmed malware infection and unauthorized communication with an external server, with a function to send data out, but the content and scope of any data sent could not be determined and no misuse has been found [1]. Members should beware of suspicious emails, texts and calls and not open unfamiliar links or attachments; Daiichi Kosho never asks for passwords or card details [3].
Contractor PC infected with malware puts about 8.72 million Big Echo karaoke member and staff records of Daiichi Kosho at risk
1 min read
- Disclosed
- Oct 8, 2026
- Occurred
- Oct 1, 2026
- Published
- Nov 11, 2026
- Last updated
- Nov 11, 2026
- Scale
- 8,724,000 records[2]
- CVSS basis
- Our assessment
- Technology
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Hospitality & food service
What to do nowOur advice
- Beware of suspicious emails, texts and calls and do not open unfamiliar links or attachments [3].
- Daiichi Kosho never asks for passwords or card details; such requests are scams .
Timeline
Technical details
Remediation
Vendor guidance
- 1Watch for suspicious contact detect[3]
Do not open links or attachments in suspicious emails or texts.
References
Official / primary2
- [1]
“外部専門機関による調査の結果、委託先が使用していた端末においてマルウェア感染および外部サーバーとの不正な通信が確認されました。また、当該マルウェアには端末内の情報を外部へ送信する機能が認められております。”
- [3]
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.