Daiichi Kosho (Big Echo) data breach
Was I affected?
Daiichi Kosho (Big Echo) confirmed a breach involving up to 8.7 million records (duplicates possible), exposing names, dates of birth, email addresses and phone numbers. You may be affected if you registered as a member or made a reservation at Big Echo, Mega Big, Karaoke Club DAM, Banana Club, B-Garage or a DK Dining restaurant.
| Announced | Oct 8, 2026 |
|---|---|
| When it happened | Malware found October 1–2, 2026 |
| Country | Japan |
| Records exposed (may include duplicates) | 8.7 million |
| Data exposed | Names, Dates of birth, Email addresses, Phone numbers and Other details |
| Through a vendor | Nippon Columbia Group |
| Status | Confirmed by the company or a regulator filing |
What happened
Daiichi Kosho, a major Japanese karaoke company and operator of the Big Echo chain, said on October 8, 2026 that a PC used by an employee of its contractor Nippon Columbia Group was infected with malware on October 1–2 and held personal data handled for Daiichi Kosho. About 8,724,000 records may have been exposed: about 8,631,000 customer records (with about 515,000 duplicates) from Big Echo, Mega Big, Karaoke Club DAM, Banana Club, B-Garage and DK Dining, plus about 93,000 employee records. The customer data includes registered names, gender, dates of birth, email addresses and phone numbers, but no passwords. Daiichi Kosho said it had not confirmed that any data actually left the PC or was misused, and its own systems were not affected.
What should I do?
- Watch for phishing emails, texts and calls that mention Big Echo or other Daiichi Kosho brands, and don't open links or attachments you don't recognize.
- Daiichi Kosho will never ask for your password or card details by message or phone; hang up or delete any request that does.
- Check your DK points balance through the official app or site if you are concerned, though the company says the exposed data alone can't be used to redeem points.
Check the other services you use →
Sources
- 委託先における個人情報漏えいのおそれについて ※追記あり (Notice regarding potential leak of personal information at a contractor, updated) · Daiichi Kosho (in Japanese) · official
- 第一興商、委託先への不正アクセスで「ビッグエコー」などの利用者情報約872万件が漏えいのおそれ (About 8.72 million Big Echo and other customer records may have leaked via contractor) · INTERNET Watch (in Japanese) · news
- Nippon Columbia malware incident exposes 8.6 million karaoke fan records · BleepingComputer · news