BookOff, Big Echo Disclose Breaches Affecting Nearly 15 Million Records

BookOff and Daiichikosho, the operator of Japan’s Big Echo karaoke chain, disclosed Oct. 9 that unauthorized access exposed nearly 15 million membership records across their systems and related contractors.

BookOff estimated that 6.43 million records were affected. Daiichikosho estimated exposure of another 8.72 million records, bringing the combined total to about 15.15 million.

The compromised information includes members’ names, birth dates, phone numbers and email addresses. Neither company’s affected systems stored detailed credit card information, and no third-party misuse of the data has been confirmed.

The incidents add to a broader wave of unauthorized system access affecting Japanese retailers, entertainment businesses and other consumer-facing companies. Attackers in many recent cases have used stolen employee or system credentials to enter internal networks and extract customer information.