KDDI Confirms Breach Compromised 12.2 Million Email Addresses
Summary
KDDI confirmed unauthorized access to email infrastructure used by five Japanese ISPs, compromising 12.2 million email addresses and 7.6 million passwords. The company says it removed the attackers and is arranging password resets.
Key points
- The breach occurred on June 17 and involved a KDDI-developed system used in email infrastructure for STNet, JCOM, Chubu Telecommunications, NIFTY, and BIGLOBE.
- KDDI confirmed that 12.2 million email addresses and passwords belonging to 7.6 million people were compromised.
- KDDI says attackers exploited a zero-day vulnerability in software used by the system; an automated translation of its notice suggests exploitation affected several ISPs from May and that a patch is being developed.
- KDDI said its separate mobile and fixed-line internet email services were not affected.
- KDDI says it removed the attackers after discovering the incident, has found no evidence of further suspicious activity, and is coordinating password resets for affected accounts.
Article Details
- Victim Organization
- KDDI
- Incident Type
- Data breach following exploitation of a zero-day vulnerability in software used by an email-infrastructure system
- Data Types Exposed
- Email addresses
- Passwords
- Affected Records
- 12.2 million people’s email addresses and 7.6 million individuals’ passwords were compromised.
- Operational Impact
- KDDI said it evicted the hackers after discovering the incident. Password resets were underway for affected accounts; KDDI reported no evidence of additional suspicious activity.
- Ransom Or Extortion
- None reported
- Claim Status
- confirmed