Telco giant KDDI says data breach affects over 12 million people

KDDI disclosed that attackers exploited a zero-day vulnerability in a third‑party email platform to breach services used by five ISPs, exposing 12,233,087 email addresses and 7,616,173 passwords; the company has forced password changes, deployed EDR, and coordinated with regulators and affected ISPs while the vendor prepares disclosure.