# KDDI Data Breach Exposes Up to 14.2 Million Email Logins Across Six Japanese ISPs

*2026-06-30 18:01 UTC · Technology · 1 min read*

> KDDI disclosed a breach of a shared email system exposing up to 14.2 million logins across six Japanese ISPs after attackers exploited a third-party software flaw.

Japan's largest telecom operator KDDI Corporation disclosed a data breach affecting a shared email platform used by six internet service providers, potentially exposing the login credentials of up to 14.2 million customers. KDDI detected unauthorized access on June 17 after attackers exploited a vulnerability in unnamed third-party software, then blocked the intruders and notified Japanese regulators.

The affected providers — STNet, KDDI Web Communications, JCOM, Chubu Telecommunications, NIFTY, and BIGLOBE — span current, former, and inactive accounts. Exposed data includes email addresses and passwords, some of which were hashed, KDDI said.

KDDI has urged customers to reset their passwords immediately and enable two-factor authentication where available. The breach is one of the largest disclosed by a Japanese telecom in recent years, highlighting growing risks tied to shared third-party infrastructure across ISPs.

## Sources

- [bleepingcomputer.com](https://www.bleepingcomputer.com/news/security/data-breach-exposes-up-to-142-million-email-logins-at-six-isps/)
- [infosecurity-magazine.com](https://www.infosecurity-magazine.com/news/kddi-breach-japanese-telcos/)

---
TechTools News · https://techtools.cz/tools/news/article/1920-kddi-data-breach-exposes-up-to-14-2-million-email-logins-across-six-japanese
Česká verze: https://techtools.cz/tools/news/clanek/1993-unik-dat-u-kddi-odhalil-az-14-2-milionu-prihlasovacich-udaju-u-sesti-japonskych