NTT Communications Corporation

NTT Communications Corporation reported a cybersecurity incident affecting approximately 18,000 corporate customers. Hackers compromised the 'Order Information Distribution System,' resulting in the potential theft of customer names, contact details, and service usage information. Despite the security breach discovery on February 5 and the containment of threats, further investigation revealed an attacker's pivot to another network device on February 15, which was also disconnected. NTT's incident response did not include personalized notifications; instead, a public website announcement was made. The breach did not affect contracts for smartphones and mobile phones provided by NTT Docomo.

Source: https://www.bleepingcomputer.com/news/security/data-breach-at-japanese-telecom-giant-ntt-hits-18-000-companies/

TPRM report: https://www.rankiteo.com/company/ntt-communications

"id": "ntt1055030725",
"linkid": "ntt-communications",
"type": "Breach",
"date": "2/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 18000,
                        'industry': 'Telecommunications',
                        'name': 'NTT Communications Corporation',
                        'type': 'Corporation'}],
 'attack_vector': 'Compromise of Order Information Distribution System',
 'data_breach': {'number_of_records_exposed': 18000,
                 'personally_identifiable_information': ['Customer Names',
                                                         'Contact Details'],
                 'type_of_data_compromised': ['Customer Names',
                                              'Contact Details',
                                              'Service Usage Information']},
 'date_detected': '2023-02-05',
 'date_resolved': '2023-02-15',
 'description': 'NTT Communications Corporation reported a cybersecurity '
                'incident affecting approximately 18,000 corporate customers. '
                "Hackers compromised the 'Order Information Distribution "
                "System,' resulting in the potential theft of customer names, "
                'contact details, and service usage information. Despite the '
                'security breach discovery on February 5 and the containment '
                "of threats, further investigation revealed an attacker's "
                'pivot to another network device on February 15, which was '
                "also disconnected. NTT's incident response did not include "
                'personalized notifications; instead, a public website '
                'announcement was made. The breach did not affect contracts '
                'for smartphones and mobile phones provided by NTT Docomo.',
 'impact': {'data_compromised': ['Customer Names',
                                 'Contact Details',
                                 'Service Usage Information'],
            'systems_affected': ['Order Information Distribution System',
                                 'Another Network Device']},
 'motivation': 'Data Theft',
 'response': {'communication_strategy': ['Public Website Announcement'],
              'containment_measures': ['Disconnection of Compromised Devices']},
 'threat_actor': 'Unknown Hackers',
 'title': 'NTT Communications Corporation Data Breach',
 'type': 'Data Breach'}