확인됨

KDDI: intrusion into mail platform for six ISPs leaked email addresses of 12,231,954 people

On June 17, 2026, KDDI found unauthorised access to the mail platform it provides to six ISPs and announced it on June 23. A vulnerability in third-party software used by the platform was exploited.

최종 수정: 2026-11-09

이 콘텐츠는 English로 표시됩니다.

개요

Affected: mail services of STNet, KDDI Web Communications (CPI), JCOM, Chubu Telecommunications, NIFTY and BIGLOBE. The July 6 report (updated July 21) confirmed email addresses of 12,231,954 people leaked, including passwords of 7,616,173 (a subset). au-branded mail runs on separate systems and was unaffected. The Ministry of Internal Affairs and Communications ordered a report on June 24. Each ISP's impact is recorded separately and must not be summed.

진행 경과

  1. 발생
  2. 발견
  3. 공개
  4. Intrusion found; system patched.

  5. Announced (up to 14.22M possibly affected).

  6. Report filed; confirmed counts published.

기업·기관의 대응

Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.

이용자 대응 방법

Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.

정보 출처

  1. ISP事業者向けメールシステムに対する不正アクセスの発生についてKDDI株式会社 · 2026-11-09
  2. KDDI株式会社に対する報告徴収総務省 · 2026-11-09
  3. ISP事業者向けメールシステムに対する不正アクセスについてのお詫びとご報告KDDI株式会社 · 2026-11-09

관련 정보·논의

정보 제보

아직 공개된 정보가 없습니다

출처 확인 또는 검토가 끝난 정보가 여기에 표시됩니다.

댓글·답글

댓글 작성

회원가입이 필요 없습니다. 댓글은 바로 공개됩니다.

비공개 이름, 주소, 비밀번호, 인증 코드는 올리지 마세요. 자동 마스킹에는 한계가 있으므로 전송 전에 확인하세요.