hi-ho: competing sales agency logs in to customer pages
On October 8 the Tokyo Metropolitan Police said they had arrested two employees of Official, a fiber internet sales agency in Tokorozawa, Saitama, on suspicion of violating the Unauthorized Computer Access Act and the Unfair Competition Prevention Act. Using a customer list of the hi-ho internet provider bought from a list broker, the two called customers posing as hi-ho staff and obtained their birth dates and postal codes. They then logged in to customer pages through the sign-in path for users who forgot their ID, checked plans and fees, and urged the customers to switch. According to the affected provider, about 3,700 customer pages were accessed since March 2023, about 2,500 customers switched, and its losses reach about 180 million yen a year.
Disclosed
2026-10-08
Organizations involved
1
Leaked or at risk
3.7K
3,700
Downtime
Unknown
Timeline
- Disclosed 2026-10-08
- 1 days
Attack or cause
- Method
- [Phishing][Credential abuse]
- Impact
- [Data leak][Financial loss]
- Entry point
- Web app
Data exposed or at risk
Services hit
Organizations involved
[Breached][Critical]Tokyo, ToshimaInformation and communications3,700 leaked
hi-ho Inc.About 3,700 customer pages accessed since March 2023; about 2,500 customers switched, with losses of about 180 million yen a year (as told to police).
Sources
- [1][News]競合他社サーバーに不正アクセス容疑 取得情報基に営業か、2人逮捕―警視庁Jiji Press · 2026-10-08
- [2][News]光回線の競合他社に不正アクセス→顧客情報得て勧誘か 営業担当逮捕The Asahi Shimbun · 2026-10-08
- [3][News]ライバル社に不正アクセス、顧客名簿入手し営業活動 容疑の光回線代理店従業員を逮捕ITmedia · 2026-10-08
- [4][News]光回線勧誘のため他社の顧客マイページに不正アクセスし契約内容確認か 不正競争防止法違反などの疑いで販売代理店の従業員2人逮捕 警視庁TBS · 2026-10-08