KDDI Breach Exposes 14.22 Million Email Credentials from Six Japanese ISPs (infosecurity-magazine.com)

• KDDI confirms breach of email system serving six Japanese ISPs.
• 14.22 million email credentials potentially exposed; dormant accounts included.
• Intrusion detected June 17; third-party software vulnerability exploited.

"Japanese telecom operator KDDI confirmed a breach where an unauthorized actor accessed an email system provided to six Japanese ISPs, potentially exposing 14.22 million email addresses and passwords, including dormant accounts. The intrusion was detected on June 17, attributed to a third-party software vulnerability. KDDI has implemented countermeasures and notified authorities. Affected customers are advised to change passwords."