Confirmed

hi-ho: 38,809 contract-unit mypage logins via social-engineered credentials viewed customer data

Disclosed Oct 8, 2026. Third parties obtained mypage credentials via phone solicitation (and possibly other means) and logged in as customers. Services: BiZiMo, Hikari Giga, CLOUD LINE, Toppa!, Dantotsu, CP WiMAX. Possibly viewed name/address/phone/email/contract/billing (no cards/bank on mypage). 38,809 unauthorized logins counted per contract, not per person. No system intrusion/vulnerability confirmed.

Last updated: 2026-11-09

Overview

38,809 contract-unit logins.

Timeline

UnknownOccurred
UnknownDiscovered
2026-10-08Disclosed

Organization response

Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.

What you can do

Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.

Sources

【重要なお知らせ】お客様情報への第三者によるアクセスが確認された事案に関するご報告株式会社ハイホー · 2026-11-09

hi-ho: 38,809 contract-unit mypage logins via social-engineered credentials viewed customer data

Overview

Timeline

Organization response

What you can do

Sources

Related information

No published information yet

Comments and replies

Write a comment