How Malware at Nippon Columbia Exposed 8.6 Million Karaoke Fan Records
In October 2026, Daiichi Kosho, Japan's largest karaoke maker operating 521 venues including Big Echo chains, disclosed that a malware infection at its contractor Nippon Columbia exposed 8.6 million customer records and 93,000 employee records. The malware was discovered on an employee's computer at Nippon Columbia Group on October 5, prompting immediate system isolation. Exposed data included full names, genders, birth dates, email addresses, and phone numbers across multiple karaoke brands including BIG ECHO, MEGA BIG, and Karaoke CLUB DAM. This incident highlights the critical vulnerability of third-party contractor relationships in Japan's entertainment sector, occurring amid a surge in supply chain attacks targeting customer databases. The breach demonstrates how malware infections at service providers can expose millions of personal records, emphasizing the urgent need for enhanced contractor security oversight and endpoint protection in outsourced data processing arrangements.
Kill Chain
