Overview
Fields included names, addresses, contact information, birth dates, identity-document numbers and contract details. Some records included agent, employer or bank-account information. The scale is both an upper bound and approximate, so the numeric field remains NULL rather than an exact people or record count. The November 6 third notice expanded the fields; the first breach disclosure date remains November 5. The entry path remains under investigation.
Timeline
- Occurred
- Discovered
- Disclosed
External unauthorized access was identified.
Service procedures were suspended and the second notice confirmed data exposure.
The third notice updated the exposed-data fields and other details.
Organization response
DOCOMO blocked access and stopped procedures through both services on November 5. It continued investigating the cause and scope; no restoration date was provided in the third notice.
What you can do
Beware of impersonating emails, texts and calls; avoid suspicious links and attachments and do not provide personal information or passwords.
Sources
- 不正アクセスによるお客さま情報流出に関するお知らせ（第二報）株式会社NTTドコモ · 2026-11-09
- 不正アクセスによるお客さま情報流出に関するお知らせ（第三報）株式会社NTTドコモ · 2026-11-09