Karaoke Giant Daiichi Kosho Warns 8.7 Million Customers of Data Breach

The Number and the Cause

The figure comes first: 8.7 million customers of Japanese karaoke operator Daiichi Kosho “may have had” personal information exposed, the company said in a statement published on October 8, 2026. The cause sits one step outside its own walls, because Daiichi Kosho says its own network was not breached. Instead, a malware infection was found on an employee computer at its supplier, Nippon Columbia Group, detected between October 1 and October 2.

Daiichi Kosho said data tied to outsourced work had been stored temporarily on the infected machine, and that it could have leaked to outside parties. The possible haul, still unverified, covers registered names and genders, phone numbers, email addresses and dates of birth. Reporting that cites the company’s notice adds the precise split: roughly 8,724,000 records in all: 93,000 employee records plus about 8,631,000 customer records, counted after deduplication. No payment card, bank or password fields were named among the exposed data, and nothing has confirmed that records actually left the supplier’s environment.

Where the Records Sit

Big Echo, one of Japan’s largest karaoke brands, took the bulk of the hit with 5.6 million affected customers. Another 3.5 million are tethered to DK Dining, part of the same corporate branch. Sister brands B-Garage, Karaoke Club Dam, Banana Club and Mega Big could also be affected. NCG handled personal-information processing for the karaoke firm and is described in public materials as a music, video and game-software group that also manages artists. The pattern is the classic supply chain failure: the blast radius depends on how many customers share one vendor, not on the size of any single victim’s own security team.

The timeline, per the notice as cited in follow-up reporting, ran fast at the start and slow after. The supplier isolated the infected machine on October 2, informed Daiichi Kosho on October 5, and the public disclosure followed on October 8 with an update the next day. As of November 8, 2026, the investigation into the origin and scope was still running, with no external leak, theft or misuse confirmed.

What the Company Has Done

Infosecurity Magazine reported that the supplier reset every compromised password, and Daiichi Kosho opened a toll-free helpline for worried customers. The company has urged caution with suspicious correspondence and advised customers to leave unfamiliar links and attachments unopened. That advice matters even without confirmed card or password theft, because names paired with real birth dates, working email addresses and phone numbers are exactly the raw material for convincing phishing messages and account-recovery fraud.

A Rough Stretch for Japanese Networks

The karaoke breach lands inside a wider run of cybersecurity incidents hitting Japanese businesses. Cloud provider IDC Frontier was hit on October 7, disrupting services for hundreds of organizations, among them the police, a credit card company, a press agency and a fan-messaging platform used by a female J-pop idol group. For Daiichi Kosho customers, the concrete facts stand at these: 8.7 million people notified, one infected supplier machine, passwords reset at the vendor, and a helpline now open in Japan.

Sources

• Karaoke giant data breach exposes 8.7M customers | Cybernews
• Daiichi Kosho Data Breach: 8.7M Users Exposed [2026]