KDDI confirms email data leak for 12.23 million, including 7.61 million passwords

2026-07-06

Leak involves 12.23 million accounts

KDDI said on the 6th that it had confirmed a leak of email addresses belonging to 12.23 million people in connection with unauthorized access to its email system that resulted in the exposure of personal information. It also said passwords for 7.61 million people had been confirmed leaked.

Exploitation of third-party software vulnerability

On June 23, the company had said its email system, provided to external internet service providers (ISPs), had been subject to unauthorized access and that as many as 14.22 million items of personal information may have been leaked. It said the breach was caused by exploitation of a vulnerability in third-party software introduced as part of the system.

Enjoyed this article? Share it with your network!