Unauthorised access at NTT Docomo exposes customer data for up to 294,839 lines
Unauthorised external access to NTT Docomo's online shop and My docomo exposed customer information associated with up to 294,839 lines. The attacker exploited the way multiple systems were interconnected to query and obtain information in bulk, with the exposed data including names, addresses, dates of birth, telephone numbers, identity document numbers, contract information and some bank account information. The company suspended the affected services on 5 November, carried out an investigation and recovery work, and considered compensation payments to victims. The ahamo website and some My docomo services resumed on 9 November.
Key facts
- Affected organisation
- NTT Docomo
- Incident type
- Data breach
- Occurred / detected
- 2026-11-05
- Scale of damage
- Customer information associated with up to 294,839 lines exposed
- Cause / method
- Unauthorised external access exploiting interconnected systems to query and obtain customer information in bulk
- Location
- Japan
If your data was exposed
Exposed dataNameAddressDate of birthPhone numberBank account
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- Various My docomo and online shop operations were suspended from around 1:05 am due to possible unauthorised external access.
- The company explained the exposure of customer information associated with up to 294,839 lines and the attack method exploiting interconnected systems, and considered compensation payments.
- The ahamo website and some My docomo services resumed following emergency checks.
33 related reports
- Watch NTT's Matsubara on Cyberattacks in Japan
- NTT docomo probes breach; up to 300,000 customer records may leak
- NTT Docomo Faces Massive Data Breach due to Cyberattack
- 「My docomo」「ドコモオンラインショップ」が緊急メンテ 外部からの不正アクセスの可能性で
- 【速報】ドコモ最大30万件情報漏えいの恐れ
- ドコモ、不正アクセスで最大30万件の情報漏えい My docomoとオンラインショップ
- NTTドコモ、自社サーバーに不正アクセス。最大約30万件の利用者の情報流出
- ドコモ、最大３０万件の情報流出 不正アクセスで
- ドコモで不正アクセス およそ30万件の情報流出
- NTT Docomo says up to 300,000 customer records leaked
- ドコモからのお知らせ : 〖お詫び〗ドコモオンラインショップ、My docomoの緊急メンテナンス実施について/当社サーバーへの不正アクセスによるお客さま情報流出に関するお知らせ（第三報：11月6日 午後6時00分時点）
- NTTドコモが「不正アクセス事案」「5G SAの通信障害」について説明 不正アクセスでは「見舞金」の支払いも検討
- ドコモ、不正アクセスで最大29.5万件の情報が流出
- ドコモ、不正アクセス被害者へお見舞金 流出は29万回線、本人確認書類の番号も（更新）
- ドコモ、不正アクセス被害者へお見舞金 流出は29万回線、本人確認書類の番号も（更新）（CNET Japan）
- ＮＴＴドコモ、情報流出３０万件 不正アクセスで口座番号も
- ドコモ、不正アクセスで個人情報30万件流出 見舞金支払い検討（毎日新聞）
- ドコモ、最大約29.5万回線の顧客情報流出で謝罪 - 複数システムの連携を悪用した攻撃
- ドコモ最大29万件超の顧客情報流出、「システム連携の隙」狙われる
- NTTドコモで約30万回線の情報漏洩。My docomoなど停止で何が起きたのか。見舞金の支払いも検討
- NTT Docomo Chief Says Personal Info Breached in Cyberattack
- 【情報まとめ】タイムズカーやドコモ、デジタル庁や経産省でも…不正アクセス相次ぐ
- NTT Docomo online shop and My docomo breach (up to about 300,000 records): ID document numbers leaked — what customers should do
- NTT Docomo外洩30萬筆個資 Qilin駭客：日系統舊漏洞多
- ドコモ不正アクセスで「本人確認書類の番号」も流出 見舞金検討
- ドコモ、「ahamo」のWebサイトを再開――不正アクセス対策の緊急メンテナンス完了
- ドコモ、「ahamo」のWebサイトを再開――不正アクセス対策の緊急メンテナンス完了（ケータイ Watch）
- ドコモがサービス再開の4時間半後に再停止、不正アクセスで情報流出29万件
- ドコモ、不正アクセス受けた「My docomo」で一部サービスが再開
- ドコモ、不正アクセス受けた「My docomo」で一部サービスが再開（ケータイ Watch）
- ドコモオンラインショップ・My docomo に不正アクセス、最大約30万件の顧客情報が流出
- 11日のドコモ通信障害、不正アクセスやサイバー攻撃は確認されず
- 11日のドコモ通信障害、不正アクセスやサイバー攻撃は確認されず（ケータイ Watch）
Other incidents at NTT Docomo
DDoS attack disrupts Japan's NTT Docomo for around 12 hours
Impact: Access to website, portal and some payment services disrupted for around 12 hours
Japan's NTT Docomo was hit by a DDoS attack on 2 January 2025, disrupting access to its website, portal and some payment services for around 12 hours. Core mobile services were not affected.
Related reports: 2 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.