Daiichi Kosho breach via contractor exposes 8.7 million records

· Cybersecurity · Japan

Daiichi Kosho, a major Japanese entertainment system maker, disclosed that a malware infection at its contractor Nippon Columbia exposed more than 8.7 million customer and employee records. The incident centers on karaoke fan data, making it one of the larger recent exposures in the entertainment sector. The disclosure points to a familiar supply-chain pattern: an attacker compromises a third-party vendor and reaches the data of the primary company through that link. Neither the full scope of the affected data nor the timing of the intrusion was detailed in the initial reports. For organizations that rely heavily on outside contractors for IT and data handling, the case is a reminder that vendor security posture directly determines the exposure of the client's own customers.

Why it matters：It is another large-scale breach arriving through a vendor rather than a direct attack, reinforcing that third-party risk management is now a core part of enterprise security programs.

Key points

  • The breach stems from a malware infection at contractor Nippon Columbia.
  • More than 8.7 million customer and employee records were exposed.
  • Daiichi Kosho is a major Japanese entertainment system maker.

Sources (original reporting)

More stories from this day