According to Security NEXT, NTT Docomo detected an external intrusion into its Online Shop and My docomo services on November 4, 2026, suspending application procedures on both services for maintenance early the next morning [1]. Subsequent investigation confirmed a breach of personal data affecting up to approximately 300,000 records, including names, addresses, mobile and contact phone numbers, and dates of birth [1]. The intrusion vector, root cause, and exact scope of leaked data remain under investigation; the company stated it will notify affected customers once clarified, and the service resumption timeline remains undecided [1].
NTT Docomo Online Shop and My docomo Breached; Up to ~300,000 Personal Records Exposed
1 min read
- Disclosed
- Nov 6, 2026
- Published
- Nov 10, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
- Attack vector
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Telecom
What to do nowOur advice
The intrusion vector, root cause, and exact scope of leaked data remain under investigation; the company stated it will notify affected customers once clarified, and the service resumption timeline remains undecided [1].
Timeline
- Security NEXT publishes report (date only; timestamp is a placeholder)[1]
Technical details
Source-Verified Summary
NTT Docomo detected an external intrusion into its Online Shop and My docomo services on November 4, 2026, suspending application procedures on both services for maintenance early the next morning [1].
Subsequent investigation confirmed a breach of personal data affecting up to approximately 300,000 records, including names, addresses, mobile and contact phone numbers, and dates of birth [1].
The intrusion vector, root cause, and exact scope of leaked data remain under investigation; the company stated it will notify affected customers once clarified, and the service resumption timeline remains undecided [1].
References
Media1
- [1]
“NTTドコモは、「ドコモオンラインショップ」と「My docomo」が外部から侵害され、一部顧客の個人情報が流出したことを明らかにした。”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.