NTT Communications announced on March 5, 2025, that it had detected unauthorized access to an internal system on February 5 [1]. The company stated that the affected system was an order information distribution system for enterprise customers, and that personal consumer service data was not leaked [1]. Official statements outlined the number of potentially affected enterprise customers and noted that they would be notified individually [1].
Backfill: this event became public on Mar 5, 2025 and we added it on Nov 10, 2026. It is not a new event.
HighMonitoringBackfillOfficially confirmed
NTT Communications Confirms Unauthorized System Access, Enterprise Customer Order Data Potentially Exposed
1 min read
- Disclosed
- Mar 5, 2025
- Occurred
- Feb 5, 2025
- Published
- Nov 10, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
- Attack vector
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Telecom, Professional services
What to do nowOur advice
Official statements outlined the number of potentially affected enterprise customers and noted that they would be notified individually [1].
Timeline
Technical details
Source-Supported Details
The press release lists the types of fields potentially exposed and clarifies that personal consumer service data was outside the affected scope. The company emphasized that it will not notify customers of this matter via email [1].
Source excerpt: "TOKYO, JAPAN, March 5, 2025 — NTT Communications Corporation (NTT Com), announced today that on February 5th, it determined that unauthorized access to its systems had occurred. On the following day, the company established that certain information may have been leaked." [1].
References
Official / primary1
- [1]
“TOKYO, JAPAN, March 5, 2025 — NTT Communications Corporation (NTT Com), announced today that on February 5th, it determined that unauthorized access to its systems had occurred. On the following day, the company established that certain information may have been leaked.”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.