KDDI Breach May Expose Up to 14.22 Million Email Logins Across Six Japanese ISPs
Summary
KDDI says attackers exploited a vulnerability in third-party software to access an email system used by five other Japanese ISPs. Email addresses and passwords for up to 14.22 million current, former, and inactive customers may have been exposed.
Key points
- KDDI says it detected the breach on June 17, blocked the attacker, and implemented defensive measures.
- The affected email system served customers of STNet, JCOM, Chubu Telecommunications, NIFTY, and BIGLOBE.
- KDDI's investigation found attackers exploited a vulnerability in unnamed third-party software.
- Email addresses and passwords for up to 14.22 million accounts may have been obtained; the investigation is ongoing and the exact number is unknown.
- KDDI says some passwords were hashed or encrypted, but did not specify the methods or how many accounts were protected this way.
- KDDI notified Japanese regulators and is working with the ISPs on further security measures; potentially affected customers were advised to reset passwords and enable 2FA where available.
Article Details
- Victim Organization
- KDDI Corporation
- Incident Type
- Data breach involving unauthorized access to an email system after attackers exploited a vulnerability in third-party software.
- Data Types Exposed
- Email addresses
- Passwords
- Affected Records
- Up to 14.22 million customers may have been affected; the exact number of impacted accounts has not been determined.
- Operational Impact
- KDDI detected the compromise on June 17, blocked the attacker, implemented defensive measures, notified regulators, and worked with affected ISPs on additional security measures. Customers were advised to reset passwords and enable two-factor authentication where available.
- Ransom Or Extortion
- Unknown
- Claim Status
- confirmed
Countries
Industries
Internet service providersJapanese telecommunications operator KDDI Corporation disclosed a data breach where threat actors gained access to one of its email systems used by five other internet service providers (ISPs) in the country.TelecommunicationsJapanese telecommunications operator KDDI Corporation disclosed a data breach where threat actors gained access to one of its email systems used by five other internet service providers (ISPs) in the country.