Telco giant KDDI says data breach affects over 12 million people

Japanese Telco KDDI Reports Massive Data Breach Affecting Over 12 Million Users

Japanese telecommunications giant KDDI has disclosed a significant data breach impacting more than 12 million users. Attackers successfully breached an email platform used by five different internet service providers (ISPs) in Japan, leading to the exposure of email addresses and passwords.

Technical Breakdown:

• Affected Service: A third-party email platform leveraged by KDDI and multiple ISPs.
• Affected Data: User email addresses and associated passwords.
• Impacted Entities: KDDI and users across at least five associated ISPs.
• TTPs/IOCs: Specific attack vectors, threat actor attribution, or Indicators of Compromise (IOCs) were not detailed in the initial report.

Defense: Users affected by this breach should immediately change their passwords for any service where they reused the exposed credentials, and enable multi-factor authentication (MFA) wherever possible. For organizations, this highlights the critical importance of robust supply chain security and third-party vendor risk management, especially for core services like email platforms.

Source: https://www.bleepingcomputer.com/news/security/japanese-telecom-giant-kddi-says-data-breach-affects-12-million-people/