A malware detected on October 5, 2026, with an isolated system the following day

On October 5, 2026, malware infected a computer belonging to an employee of Nippon Columbia Group (NCG), a subcontractor of Daiichi Kosho responsible for managing customer data. According to Daiichi Kosho’s statements, the compromised system was immediately isolated on October 6, limiting the potential spread of the malware. The incident was reported to Daiichi Kosho the same day, as indicated by Trustlist.uk.

The exposed data involves 8.6 million customers and 93,000 employees, but does not include passwords or sensitive information such as bank card details. The exposed fields include full names, genders, dates of birth, email addresses, and phone numbers, according to consistent sources from BleepingComputer and Protect.computer.

A breach at a subcontractor can expose millions of records without directly affecting the main system, as demonstrated by the incident at Nippon Columbia.

Karaoke brands affiliated with Daiichi Kosho directly impacted

Although Daiichi Kosho’s internal systems were not compromised, the incident affects customers and employees of karaoke venues managed by the group, including Big Echo, MEGA BIG, Karaoke CLUB DAM, Banana Club, B-GARAGE, and DK Dining. These brands, present in Japan and potentially internationally, see their customer databases exposed through a subcontractor, as highlighted by Protect.computer.

Daiichi Kosho clarifies that the exposed data does not grant access to customer accounts, particularly loyalty points, and that no fraudulent use of these points has been detected. However, the risk of phishing or fraudulent contact remains, as the group warns.

No confirmed leak, but a persistent risk and strengthened preventive measures

Daiichi Kosho states it has neither confirmed any data breach nor theft, but acknowledges that the risk cannot be entirely ruled out, as the data was temporarily stored on the infected PC, according to Trustlist.uk. In response, the group has reset the credentials of the affected systems and set up a free helpline for customers seeking information.

Meanwhile, Daiichi Kosho announces strengthened oversight of its contractors to prevent similar incidents in the future. This measure could serve as an example for Beninese and African companies, where data management outsourcing is common.

What this means here: increased vigilance over contractors and client data protection

For businesses and government agencies in Benin and West Africa, this incident underscores the importance of thoroughly vetting the cybersecurity of contractors handling customer data. A vulnerability at an external partner can expose millions of records without the main system being directly compromised, as illustrated by Daiichi Kosho’s case.

Local organizations should regularly audit the security practices of their contractors, particularly those managing personal data or critical systems. Additionally, implementing rapid response protocols in case of an incident, such as immediately isolating infected systems, could mitigate damage. Finally, raising awareness among employees and customers about phishing risks, as Daiichi Kosho has done, is essential in the face of rising cyber threats.