KDDI Breach Affects Six Japanese ISPs, Exposes 14.2 Email Credentials

KDDI confirmed an intrusion into an email system used by several Japanese ISPs that likely exposed up to 14.22 million email addresses and passwords; the company says the attacker exploited a vulnerability in third-party software, detected the incident on June 17, implemented mitigations, notified authorities, and advised affected users to change their passwords.