12 Million Impacted by Data Breach at Japanese Telco KDDI
Japanese telecommunications giant KDDI this week confirmed that over 12 million people were affected by a June data breach.
The incident occurred on June 17 and involved unauthorized access to a system developed by KDDI as part of the email infrastructure used by five ISPs, namely STNet, JCOM, Chubu Telecommunications, NIFTY, and BIGLOBE.
KDDI’s mobile and fixed-line internet email services, which operate on separate infrastructure, were not affected by the attack.
A zero-day vulnerability in software implemented as part of the system was exploited during the attack, the telecoms giant explains.
An automated translation of KDDI’s notice (PDF) suggests that several ISPs have been affected by the bug’s exploitation since May, and that the vendor is now working on a patch for the zero-day.
The company also confirmed that the hackers compromised the email addresses of 12.2 million people, as well as the passwords of 7.6 million individuals.
...
Copyright of this story solely belongs to securityweek.com. To see the full text click HERE
