ENKR

NTT West group call-centre data theft

Add to my breach check

Made public · 9,280,000 people

What leaked7

Replaceable

  • Card number

Hard to replace

  • Mobile number
  • Home or delivery address

Permanent

  • Date of birth
  • Full name
  • Gender
  • Partial date of birth or age
  • Card number81 records from two client companies
  • Date of birthin some records · NTT West's own customers
  • Mobile numberphone number · landline or mobile
  • Genderin some records
  • Partial date of birth or ageage, in some records

To-dos3 · about 30 min in all

  1. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: scam calls, phishing messages
  2. Turn on instant transaction alertsabout 5 minHelps you notice: scam calls
  3. Remove your address and phone from public profiles and tighten SNS privacyabout 20 minfreeLimits harm from: visits or contact at home

What happened next25 events

  1. Undetected 2 eventsabout 10 yr 0 mo · show events
  2. Response 14 eventsNotice in 211 days · Back to latest
  3. RemedyNone on record
  4. Penalty 6 eventsOngoing · show events
  5. Disputes 3 eventsOngoing · show events

Response: 14 events

Back to latest
  1. The contractor, NTT Marketing Act ProCX: no secondary harm, such as unauthorised use of customer information, confirmed so far
  2. The president and CEO stepped down at the end of March 2024, taking responsibility for the group company's leak of customer data
  3. Announced group-wide information-security measures based on the committee's findings
  4. Published the in-house investigation committee's report · with outside experts; the 2022 check had altered export logs and given the client false answers
  5. Began sending letters to people whose data could not be linked to a client
9 more
  1. Count revised to 9.28 million customers of 69 clients; 1.17 million could not be linked to any client
  2. Opened an inquiry line for clients' customers
  3. Opened a dedicated call centre for NTT West customers
  4. Published an apology to customers
  5. NTT West announced that about 1.2 million of its own customers' records were among the stolen data
  6. ProCX and NTT Business Solutions announced that a former temp worker had taken about 9 million customer records of 59 clients
  7. After a police investigation of NTT Business Solutions, ProCX admitted the data theft and reported the leak to the client that had raised it
  8. Blocked writing data from maintenance terminals to USB memory
  9. After a client asked in April 2022 whether its customer data had leaked, ProCX and NTT Business Solutions told it in July 2022 that no leak was found
Company
NTT West
When it happened
–
Company detected it
Made public
Notice
Leak confirmed
Affected
9,280,000 people · customers and residents of 69 client companies and local governments; ProCX December 19, 2023, PPC: about 9.28 million

How the facts developed

  1. Revised to 9.28 million records of 69 clients; 1.17 million could not be linked to a client and were notified by letter from February 2024
  2. About 9 million records of 59 clients announced; NTT West's own customers about 1.2 million

Sources