[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f14wy7k269yhye":3,"$f4imaa5k6s28v":61},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":9,"domain":10,"breachDate":11,"addedDate":12,"publishedAt":13,"modifiedDate":13,"contentUpdatedAt":13,"source":14,"sourceUrl":15,"sourceUrls":16,"pwnCount":19,"affectedCount":19,"affectedCountStatus":20,"affectedCountLowerBound":21,"affectedCountUnit":22,"hasEnglishDescription":4,"contentLocale":23,"availableLocales":24,"translations":34,"severity":45,"dataClasses":46,"description":49,"seoTitle":50,"seoDescription":51,"logoUrl":52,"isVerified":4,"isSensitive":4,"isSpamList":53,"isMalware":53,"company":54},"6a66873f23f48fc7e832722b","KDDIISPEmail2026","KDDI ISP 2026 数据泄露事件","kddi-isp-email-2026","kddi.com","2026-05-16T00:00:00.000Z","2026-07-26T22:16:31.897Z","2026-10-09T21:24:39.923Z","Official notices from affected institutions","https:\u002F\u002Fnewsroom.kddi.com\u002Fnews\u002Fassets\u002F2026\u002Fkddi_nr_s-73_4619\u002Fkddi_nr_s-73_4619_pdf_01.pdf",[15,17,18],"https:\u002F\u002Fwww.soumu.go.jp\u002Fmenu_news\u002Fs-news\u002F01kiban18_01000281.html","https:\u002F\u002Fwww.securityweek.com\u002F12-million-impacted-by-data-breach-at-japanese-telco-kddi\u002F",12231954,"known",null,"people","zh",[25,26,23,27,28,29,30,31,32,33],"en","tr","hi","es","ar","fr","bn","pt","ru",{"en":35,"tr":36,"zh":37,"hi":38,"es":39,"ar":40,"fr":41,"bn":42,"pt":43,"ru":44},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},"Critical",[47,48],"Email addresses","Passwords","\u003Cp>\u003Cstrong>KDDI ISP 2026 数据泄露事件\u003C\u002Fstrong>源于第三方软件漏洞遭到利用，该软件用于KDDI为互联网服务提供商开发的共享电子邮件平台。KDDI于7月6日发布、7月21日更新的官方报告称，12,231,954人的系统生成电子邮件地址遭到泄露，其中7,616,173人的系统密码也遭到泄露。密码泄露人数包含在电子邮件地址泄露人数之内，两项数字不能相加。\u003C\u002Fp>\n\n\u003Ch2>事件时间线与原因\u003C\u002Fh2>\n\u003Cp>据官方报告，部分ISP遭到的未经授权访问始于2026年5月16日。KDDI于6月17日确认了该事件，当天修改了系统以封堵疑似入侵点，并采取了技术防护措施。KDDI于6月23日首次公开宣布此事；日本通信主管部门于6月24日依据《电信业务法》要求其提交报告，KDDI随后于7月6日提交了详细报告。\u003C\u002Fp>\n\n\u003Cp>此次访问利用了平台所使用的第三方软件中的漏洞。KDDI于6月17日确认事件时，该软件供应商尚不知晓这一漏洞，随后启动了向主管部门通报及公开披露的流程。KDDI未披露软件名称、CVE、攻击者身份，也未进一步说明具体的访问方式。\u003C\u002Fp>\n\n\u003Ch2>涉及哪些数据和服务？\u003C\u002Fh2>\n\u003Cp>已确认泄露的数据类别为电子邮件地址和密码。12,231,954是官方报告中电子邮件地址遭到泄露的人数，并非去重后的原始数据行数，也不是本地记录数。7,616,173是上述人群中密码遭到泄露的人数。报告未将姓名、电话号码、邮寄地址、支付数据、政府签发的身份证件信息或电子邮件内容列为已确认泄露的字段。\u003C\u002Fp>\n\n\u003Cp>独立报道指出，使用该平台的五家服务提供商分别为STNet、JCOM、Chubu Telecommunications、NIFTY和BIGLOBE。根据官方报告，KDDI的au Mail、UQ mobile Mail和au one net Mail服务运行于独立设备上，未受影响。仅凭KDDI域名或品牌，无法确定某个邮箱是否属于此次事件的影响范围。\u003C\u002Fp>\n\n\u003Ch2>本地数据覆盖与应对措施\u003C\u002Fh2>\n\u003Cp>生产环境中没有针对此事件的导入任务，也没有本地个人级数据，所有电子邮件地址、密码及其他关联数据集合均为零条记录。外部披露的公司层面影响范围并不作为本地搜索结果、去重电子邮件地址数据集或本地存储的密码数量来呈现。\u003C\u002Fp>\n\n\u003Cp>截至6月21日，KDDI已在负责对外通信的服务器上部署EDR，并表示6月23日进行的第三方取证审查未发现已披露漏洞以外的可疑痕迹。KDDI与受影响的ISP协调了密码更改事宜，并计划对其余账户执行强制密码重置。收到通知的客户可以直接打开服务提供商的网站地址，设置一个新的、仅用于该账户的密码；如果在其他服务中重复使用了旧密码，也可以一并更改。对于意料之外的密码重置消息，应通过已知的官方渠道核实，不要使用消息中的链接。\u003C\u002Fp>","KDDI ISP 2026 数据泄露事件 (12.2 百万 受影响人数)","KDDI ISP 2026 数据泄露事件. 据报告，涉及12.2 百万人。 已报告的数据：电子邮箱地址, 密码。 了解影响范围、风险及防护措施。","\u002Fuploads\u002Flogo\u002Fkddi_com.png",false,{"name":55,"sector":56,"country":57,"website":10,"websiteArchiveUrl":58,"websiteStatus":59,"websiteCheckedAt":60},"KDDI Corporation","Telecommunications","Japan","","active","2026-07-29T20:23:00.000Z",{"success":4,"breaches":62},[63,70,77,84],{"slug":64,"title":65,"companyName":66,"logoUrl":67,"breachDate":68,"affectedCount":69,"affectedCountStatus":20},"american-tower","American Tower 业务联系人数据事件 (2026)","American Tower","\u002Fuploads\u002Flogo\u002Famericantower_com.webp","2026-06-12T00:00:00.000Z",216601,{"slug":71,"title":72,"companyName":73,"logoUrl":74,"breachDate":75,"affectedCount":76,"affectedCountStatus":20},"charter","Charter 2026年数据泄露事件","Charter","\u002Fuploads\u002Flogo\u002Fcharter_com.webp","2026-05-23T00:00:00.000Z",4851517,{"slug":78,"title":79,"companyName":80,"logoUrl":81,"breachDate":82,"affectedCount":83,"affectedCountStatus":20},"odido","Odido 2026 年数据泄露","Odido","\u002Fuploads\u002Flogo\u002Fodido_nl.webp","2026-02-12T00:00:00.000Z",5873327,{"slug":85,"title":86,"companyName":87,"logoUrl":88,"breachDate":89,"affectedCount":90,"affectedCountStatus":20},"bouygues-telecom","Bouygues Telecom 数据泄露","Bouygues Telecom","\u002Fuploads\u002Flogo\u002Fbouyguestelecom_fr.webp","2025-08-04T00:00:00.000Z",5685771]