第一興商(ビッグエコー等)Data breach / unauthorized access incident
- Occurred on
- Unconfirmed
- Announced on
- October 8, 2026
- Severity
- SCompromise of deep personal data or usable credentials.
- Scale
- 8,631,000 records
- Main impact
- They announced that due to infection of a contractor terminal, approximately 約863.1万件 customer records and 従業員約9.3万件 employee records, totaling 計約872.4万件, may have been exposed. Names, dates of birth, and contact information were affected; customer passwords were not included.
- Information involved
- Email addressPhone numberFull nameDate of birth
- Cause / key point
- A contractor employee's terminal (PC1台) was infected with malware; the contractor is investigating the cause and scope of the damage.About Supply chain attacks (via vendors & shared services)
- Industry
- Services & other
- Listing / capital
- Listed company東証プライム 7458(第一興商)
- Last updated
- October 20, 2026
Stock price reaction to the disclosure第一興商 / 東証プライム 7458
Stock information is reference data based on Yahoo Finance and may be delayed. This site does not solicit or advise investment and does not guarantee the accuracy or completeness of this information. We accept no liability for any investment decision based on it.
Is this incident worth paying attention to?
Written & reviewed

Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Same attack method
- A旭化成セラピューティクス(Pharma DIGITAL)2026.10.06 announced・Affected 514,000 people
- A大和証券2026.10.05 announced・Affected 220,000 records
- CTOPPAN(損保ジャパン)2026.09.29 announced・Affected 177,426 people
- A大東ガス株式会社2026.09.28 announced・Affected 124,000 records
- A大阪大学2026.10.21 announced・Affected 77,851 people
- A福岡大学(SMART SPI)2026.07.09 announced・Affected 33,668 people
Same industry
- SSリクルート(カーセンサーnet、C-MATCH)2026.10.21 announced・Affected 3,709,551 records
- S日本郵政(ゆうID・ゆうゆうポイント)2026.10.19 announced・Affected 249 accounts
- Sセレス(ポイントインカム)2026.10.07 announced・Affected 195 records
- Sエバーグリーン・マーケティング(メール)2026.10.06 announced・Affected 763 records
- Sチケットプラス(チケプラ)2026.10.01 announced・Affected 107 people
- SEPARKリラク&エステ(PeakManager)2026.09.24 announced・Affected 22,180,000 records
Attack method classification: Supply chain attacks (via vendors & shared services)(Compromising the provider instead of the user)
Read the Supply chain attacks (via vendors & shared services) guide and national trends →