[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fEb8rQGW3Zt2WqlBnIOpTmIvRYIMhUczC0QEQam-oS_E":3},{"article":4,"iocs":54,"watch_terms":57,"solutions":58,"lesson":134},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"b45c2348-eccc-4be8-a8d1-46424b607c0f","Nippon Columbia malware incident exposes 8.6 million karaoke fan records","nippon-columbia-malware-incident-exposes-8-6-million-karaoke-fan-records-406e1e","Daiichi Kosho, a major Japanese entertainment system maker, disclosed that a malware infection at its contractor, Nippon Columbia, exposed more than 8.7 million customer and employee records. [...]","A malware infection at Nippon Columbia, a contractor for Japanese entertainment system maker Daiichi Kosho, has potentially exposed the personal data of over 8.7 million customers and employees. The exposed information includes names, genders, dates of birth, email addresses, and phone numbers. While no data theft has been confirmed, Daiichi Kosho is advising customers to be cautious of unsolicited communications.","Malware infection at Nippon Columbia exposes 8.7 million karaoke fan records.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fnippon-columbia-malware-incident-exposes-86-million-karaoke-fan-records\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F10\u002F09\u002Fbigecho.jpg","2026-10-11T14:23:46+00:00","2026-10-11T16:00:18.238996+00:00",7,[17,20,22,25,27,29],{"name":18,"type":19},"Daiichi Kosho","vendor",{"name":21,"type":19},"Nippon Columbia",{"name":23,"type":24},"Big Echo","product",{"name":26,"type":24},"MEGA BIG",{"name":28,"type":24},"Karaoke CLUB DAM",{"name":30,"type":24},"Banana Club","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":31,"icon":33,"name":34,"slug":35},null,"Breaches","breaches",[37,39,44,49],{"category":38},{"id":31,"icon":33,"name":34,"slug":35},{"category":40},{"id":41,"icon":33,"name":42,"slug":43},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":50},{"id":51,"icon":33,"name":52,"slug":53},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[55],{"type":48,"value":48,"context":56},"Malware infection discovered on an employee's computer.",[18,21,23],{"controls":59,"vendors":133},[60,81,107],{"slug":61,"name":62,"problem":63,"products":64},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",[65,73],{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"slug":82,"name":83,"problem":84,"products":85},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[86,91,99],{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":87,"product_name":88,"url":89,"description":90},"defender-for-endpoint","Microsoft Defender for Endpoint","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fendpoint-security\u002Fmicrosoft-defender-endpoint","Endpoint detection and response for Windows, macOS, Linux and mobile devices.",{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"sophos","Sophos","\u002Fvendor-logos\u002Fsophos.png","sophos-endpoint","Sophos Endpoint","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fendpoint-security","Endpoint protection with Intercept X anti-ransomware technology and EDR.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"slug":108,"name":109,"problem":110,"products":111},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[112,120,128],{"vendor_slug":113,"vendor_name":114,"vendor_logo":115,"product_slug":116,"product_name":117,"url":118,"description":119},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-dlp","Netskope DLP","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention for web, cloud apps, AI tools and endpoints.",{"vendor_slug":121,"vendor_name":122,"vendor_logo":123,"product_slug":124,"product_name":125,"url":126,"description":127},"forcepoint","Forcepoint","\u002Fvendor-logos\u002Fforcepoint.png","forcepoint-dlp","Forcepoint DLP","https:\u002F\u002Fwww.forcepoint.com\u002Fproduct\u002Fdlp-data-loss-prevention","Data loss prevention for endpoints, network, email and cloud applications.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":129,"product_name":130,"url":131,"description":132},"purview-dlp","Microsoft Purview Data Loss Prevention","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fdata-security-governance\u002Fmicrosoft-purview-data-security","Data classification and loss prevention across Microsoft 365, endpoints and connected cloud apps.",[],{"slug":135,"title":136,"body":137,"framework_refs":138,"framework_notes":151},"contractor-malware-breach-exposes-87m-karaoke-customer-records","Contractor Malware Breach Exposes 8.7M Karaoke Customer Records","A malware infection at Nippon Columbia, a third-party contractor for Daiichi Kosho, resulted in the potential exposure of personal data belonging to over 8.7 million customers and employees. This incident highlights the critical risk posed by third-party vendors who handle sensitive customer data without the same security rigor as the primary organization. Because the breach originated in a contractor's environment, Daiichi Kosho had limited visibility and control over the security posture that ultimately put its customers at risk. The inability to confirm whether data was actually exfiltrated further underscores gaps in logging and monitoring capabilities. Organizations must treat contractor and supplier security as an extension of their own security program.",[139,140,141,142,143,144,145,146,147,148,149,150],"CIS Control 15 – Service Provider Management","CIS Control 13 – Data Protection","CIS Control 17 – Incident Response Management","NIST SP 800-161 – Supply Chain Risk Management","NIST IR-6 – Incident Reporting","NIST AC-3 – Access Enforcement","NIST SI-3 – Malicious Code Protection","GDPR Article 28 – Processor Obligations","GDPR Article 33 – Notification of Personal Data Breach","GDPR Article 5(1)(c) – Data Minimisation","ISO\u002FIEC 27036 – Information Security for Supplier Relationships","ITIL – Supplier Management Practice",{}]