KDDI Corporation

Profile narrative

KDDI Corporation is a Japanese telecommunications operator that provides a range of services including mobile voice and data communications, fixed-line telephone services, broadband internet access, and data centre operations. The company also offers integrated ICT solutions such as cloud computing, security services, and enterprise networking to both consumer and business customers. Its core market is Japan, where it serves millions of individual subscribers and corporate clients through a nationwide network infrastructure. In addition to domestic operations, KDDI maintains international points of presence that enable global connectivity for its customers and support overseas business expansion. The firm’s service portfolio is designed to deliver seamless communication experiences across mobile, fixed-line, and IP-based platforms.

The June 2026 incident in which attackers accessed a shared email platform exposed approximately 12.2 million email addresses and 7.6 million passwords, illustrating the considerable size of KDDI’s email user base. This figure was reported below an earlier worst‑case estimate of 14.22 million records, showing that the breach affected a substantial portion of the addresses managed for KDDI and its partner ISPs. Headquartered in Japan, KDDI operates as a standalone corporation with its primary listing on the Tokyo Stock Exchange. The company distinguishes itself through its focus on converged telecommunications and information‑technology services, positioning it as a key provider of both connectivity and digital solutions. KDDI’s notable competencies include the rollout of 5G mobile networks, the operation of extensive fibre‑optic broadband infrastructure, and the delivery of managed security services to enterprise clients. These capabilities are reinforced by its compliance with Japanese telecommunications regulations and its participation in industry standards bodies. While the breach highlighted a vulnerability in third‑party software, KDDI’s response involved blocking the attackers, initiating password resets, and notifying the relevant regulators. The company’s separately operated mobile and fixed‑line email services remained unaffected, underscoring the segmentation of its service platforms. KDDI’s profile reflects a large‑scale telecom operator that integrates traditional carrier functions with modern ICT offerings to serve a broad customer base in Japan and beyond.

Incidents

1 incident linked to this organisation.