Summary
Japanese telecommunications giant KDDI has confirmed a cyberattack on June 17, 2026, which exposed up to 14.22 million email addresses and passwords, some unencrypted, belonging to customers of six ISPs. The company is coordinating countermeasures and urging affected users to update their passwords.