Japanese Telecom Giant Says Breach May Expose 14.2 Million Email Accounts

KDDI disclosed a breach of a shared email system that may have exposed email addresses and passwords for up to 14.2 million accounts across six Japanese ISPs after attackers exploited a third‑party software vulnerability; the company blocked the attacker, is investigating, has notified regulators and providers, and recommends password resets, enabling 2FA, and monitoring for suspicious activity.