KDDI breach leaks 12.2m user emails, 7.6m passwords

THE KDDI data breach affected approximately 12.23 million users, with hackers stealing email addresses and around 7.61 million passwords. KDDI confirmed the breach on June 23 and updated the public on the incident on July 6. The hackers exploited vulnerabilities within the software that KDDI uses, and while some passwords were hashed and salted, others were stored in plaintext. Users are urged to change their passwords and remain vigilant against phishing attacks. KDDI is working with email service providers on mitigations and enforcing mandatory password resets.