Kintetsu Group Holdings
Osaka, Japan4 sources
Confirmed:Confirmed by the organisation, a regulator or a securities filing. First reported 31 Oct 2026.
Supply chain breach at NTT Data subcontractor affects Kintetsu bond buyers
Unauthorised access to an NTT Data subcontractor's digital securities platform potentially leaked names and purchase amounts for 2,678 bond purchasers of Kintetsu Group Holdings. Kintetsu was notified on 30 October and disclosed on 31 October.
- Type
- Supply chain
- Sector
- Transport
- Records
- 2.7K records confirmed
- First reported
- 31 Oct 2026
- Latest source
- 1 Nov 2026
What to do
- Update the affected app or extension to the version the vendor names as clean.
- If you installed a compromised version, change passwords you used on that machine.
- Search your lockfiles and build logs for the affected package versions.
- If a malicious version was installed, rotate every secret that machine or pipeline could read.
- Pin dependencies and review install scripts in CI.
Not sure? Ask an assistant with the sources attached, or have a coding agent check your systems.
Check your systems for Kintetsu Group Holdings