Data Breach Roundup (Oct 9 - 15, 2026)
Nippon Columbia malware incident exposes 8.6 million karaoke fan records
Nippon Columbia is a contractor for Daiichi Kosho, a major Japanese entertainment system maker. Exposed data includes full names, genders, dates of birth, email addresses, and phone numbers for employees and customers.
Bill Toulas
UK Legal Aid Agency: Hackers stole records dating back to 1978
The LAA disclosed the cyberattack in early May 2025, warning that payment information for legal aid providers might have been compromised. Two weeks later, it confirmed the resulting data breach was more serious than first believed after finding that attackers had stolen a large trove of sensitive applicant and recipient data from 2010 onward, including contact details, dates of birth, national ID numbers, criminal history, employment status, as well as contribution amounts, debts, and payments. The threat actors have also stolen legal aid providers' data, including provider contracts, office locations, financial information, contact details, LAA Online Portal credentials (including names and email addresses), and more. In an update published this week, the LAA said follow-up analysis of the exfiltrated data found that the stolen records go back almost five decades. However, it noted that records predating 2007 do not mean everyone who received, applied for legal aid, or interacted with the justice system before 2007 was affected.
Sergiu Gatlan
Community Discussion