Malware infection discovered on a contractor's PC
On 5 October a Nippon Columbia employee’s workstation was found running malicious code, and the device was isolated the next day.
The infection belongs to the contractor that supports Daiichi Kosho’s karaoke platforms – BIG ECHO, MEGA BIG, Karaoke CLUB DAM, Banana Club, B‑GARAGE and DK Dining.
Why the data exposure matters
Daiichi Kosho says its own systems were untouched, but the breach‑area includes 93,000 employee records and 8,631,000 customer records.
Exposed fields: full name, gender, date of birth, email address and telephone number. No passwords or loyalty‑point balances were found in the dump.
Independent verification of the 8.6 million‑record figure is still pending.
Immediate response
Nippon Columbia reset passwords and other authentication credentials across the affected environment.
Daiichi Kosho has assured customers that no loyalty points have been misused.
What organisations can do
- Audit any third‑party vendors for malware detection capabilities.
- Force password changes for any accounts tied to the contractor’s services.
- Monitor for phishing or social‑engineering attempts using the leaked personal details.
- Review logging and segmentation to ensure a breach in a supplier cannot spill into core systems.