Japan's KDDI hack leaks data of more than 12 million people
The email system of Japanese telecoms operator KDDI was hacked, affecting more than 12 million people whose personal data was leaked. Initially, the possible leak of up to 14.22 million customer records was raised, and later the scale of the leak was reported as up to 12.23 million email addresses and 7.61 million passwords. Vulnerabilities in a partner's software and in the internet service delivery system were identified as the starting point of the attack.
Key facts
- Affected organisation
- KDDI
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- More than 12 million people affected; up to 12.23 million email addresses and 7.61 million passwords leaked
- Cause / method
- Email system hack via vulnerabilities in partner software and the internet service delivery system
- Location
- Japan
If your data was exposed
Exposed dataEmailPassword
- Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- The leak of 14.22 million personal data records at KDDI came to light.
- It emerged that the email system had been hacked and that a vulnerability in partner software was the starting point of the attack.
- The scale of the leak was reported as up to 12.23 million email addresses and 7.61 million passwords.
- KDDI said more than 12 million people were affected by the data leak.
7 related reports
- KDDI 개인정보 1천422만건 유출 파문…日 'AI 보안' 속속 도입
- 일본 KDDI 이메일 시스템 해킹...최대 1422만건 고객 정보 유출 가능성
- 일본 KDDI, 이메일 계정 1,422만 건 유출…협력사 소프트웨어 취약점이 공격 시작점
- KDDI Suffers Massive Data Breach: Up to 12.23 Million Email Addresses, 7.61 Million Passwords Leaked via ISP System Vulnerability
- 12 million email addresses and 7 million passwords breached in KDDI cyberattack
- Telco giant KDDI says data breach affects over 12 million people
- 12 Million Impacted by Data Breach at Japanese Telco KDDI
Other incidents at KDDI
Up to 22,541 KDDI customer records may have leaked
↳ Knock-on damage from the Lifenet Insurance incident · View original incident22.5kImpact: Possible leak of up to 22,541 customer records
Unauthorised access to Lifenet Insurance's system linked to KDDI led to the confirmed possibility that up to 22,541 KDDI customer records leaked. The data concerned includes names, postcodes, phone numbers, email addresses and member IDs, plus gender and date of birth for some customers. The two companies blocked the access route and suspended some functions, such as accepting applications for au Life Insurance.
Related reports: 4 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.