MediumII Cyber Warfare & Critical Infrastructure6 November 2026, Friday

Docomo leaks ID and bank account data and will pay compensation

Yoshiaki Maeda, president of NTT Docomo, Japan's largest mobile operator, said on 6 November that data on up to about 300,000 people had leaked. The data include ID document numbers and bank account numbers; the company will pay compensation.

Location: TOKYO

According to a Jiji report of 6 November, the leaked information covers names, addresses, identity verification document numbers, bank account numbers and account holder names, phone numbers and subscription plans. Former subscribers are among those affected. Card details were said not to have leaked, although the first report on 5 November said payment data were being examined. As of 6 November the company had not said who would be compensated or how much.

The unauthorised access was detected on Wednesday 4 November, and My docomo and the online store were shut down. Sources differ on the timing of the shutdown: Jiji gives the early hours of Thursday 5 November, Anadolu Agency Wednesday morning. According to Anadolu, a nationwide outage of voice calls, mobile data and text messaging began at 11:18 local time on 5 November (05:18 TRT). Docomo said it was unclear whether the outage was linked to the unauthorised access; the link could not be verified.

The constraint lies not in the 300,000 figure but in the type of data leaked. Next to Arara's 77 million addresses, a breach of this size looks small. But when ID document numbers leak together with bank account numbers, the risk of account takeover and fraudulent applications is far higher than with an address list. Because Docomo had not disclosed compensation per person as of 6 November, the cost cannot yet be measured. According to Innovatopia's 22 October review, sample policies from major insurers cap apology payments at 1,000 yen per person.

Talay assessment

Bottom line

The Docomo breach is small in number but severe in kind: ID documents and bank accounts leaked together. A nationwide outage in critical telecom infrastructure the same week, even with no verified link, is forcing regulators to put telecoms at the centre of the emergency cyber package. The most likely path is that compensation is set at a few thousand yen and the telecom regulator issues administrative guidance.

Likely effects

Docomo's balance sheetNegativeWeeks
If compensation for up to 300,000 people exceeds the 1,000-yen per-person apology cap in sample policies, the company pays the difference from equity.
Bank fraudNegativeWeeks
The combined leak of ID document numbers and bank accounts could increase account takeover and fraudulent application attempts.
Telecom regulationUncertain1–6 months
The nationwide outage the same week could put telecom operators at the centre of the audit and reporting obligations in the cyber package.

Possibilities, ranked

1
Compensation and administrative guidance55%
Docomo announces its compensation amount, and the regulator settles for administrative guidance.
Watch: Docomo's compensation announcement and a statement from the telecom regulator
2
Link to the outage confirmed25%
The investigation shows the unauthorised access was linked to the network outage, turning the incident into a critical infrastructure case.
Watch: Docomo's report on the cause of the outage
3
The breach grows20%
The number of people affected exceeds the 300,000 upper bound, or payment data come within scope.
Watch: Docomo's investigation update

Probabilities are calibrated judgement based on the sources, not measurement, and are revised as new information arrives. Not investment advice.

Market reaction

Indicators affected

Records leaked (upper bound)▼ ~300k
Outage start (TRT)▼ 05:18