Major Japanese telco says cyberattack exposed 12 million emails

KDDI disclosed a cyberattack on an email platform used by several ISPs that exposed more than 12.2 million customer email addresses and 7.6 million passwords after attackers exploited a third‑party software vulnerability; the company patched the flaw, submitted a report to regulators, and affected ISPs are enforcing password resets while investigators report no evidence of lateral compromise beyond the exploited vulnerability.