2026-10-20
NIFTY Line Application System Breach (Up to 542,513 Records): Member IDs, Names, Addresses and Phone Numbers May Be Exposed — What Fibre Customers Should Do
On October 19, 2026, NIFTY Corporation, a Japanese internet service provider, announced (first report) that it had confirmed unauthorized access from outside to its line application and acceptance management system. According to the company, it confirmed the unauthorized access at around 10:20 on October 19 and immediately blocked access from the source. The system is an internal management tool the company uses to register information; it is separate from the website (application forms and so on) that customers use to apply directly. Up to 542,513 records may be affected. They cover customers who applied for a line since 2019 (excluding the company's website), for the services @nifty Hikari, @nifty MAX Hikari and @nifty au Hikari Plus. The items are member ID, name, gender, date of birth, address, phone number and email address; this is the full list of items that may have leaked, and what actually leaked is under investigation. The system holds no bank account or credit card data, which is not included. The notice does not mention passwords. The cause has not been disclosed; the company is investigating with outside specialists and is in the process of reporting to Japan's Personal Information Protection Commission. This site's take: anyone who applied for one of these services since 2019 should assume contacts may come from someone who knows their name, address, phone number and birth date, and should not follow links or instructions in emails, texts or calls claiming to be NIFTY. Check through an official contact you look up yourself.