Supplier Malware Infection Puts Data of 8.7 Million Karaoke Customers at Risk

Daiichi Kosho, operator of the Big Echo karaoke chain, has disclosed a data breach at one of its suppliers. The company says Nippon Columbia Group (NCG), which handles customer information on its behalf, found malware on an employee's PC between October 1 and 2. The device was isolated from the network on October 2, and NCG reported its findings to Daiichi Kosho on October 5.

Personal data from outsourced work was temporarily stored on that device, and the company cannot rule out that it was leaked. Around 8,724,000 customers who registered or made reservations may have had their names, genders, dates of birth, email addresses and phone numbers exposed. Most are Big Echo customers (5.6 million) and DK Dining customers (3.5 million). Mega Big, Banana Club, Karaoke Club Dam and B-Garage are also affected. NCG has reset affected passwords and is still investigating the cause and whether data was actually compromised.

Daiichi Kosho has warned customers to watch for phishing emails, SMS messages and phone calls that use the exposed details. It advised people not to open unfamiliar links or attachments and stressed that it will never ask for passwords or credit card information. A toll-free number has been set up for concerned customers while the company confirms what happened.