Japan's PPC instructs KDDI over data leak involving 12.2m users
( August 20, 2026, 01:56 GMT | Official Statement) -- MLex Summary: Japan’s Personal Information Protection Commission announced Wednesday that it instructed KDDI, a leading Japanese telecommunications company that developed an email system and provides services to multiple internet service providers, to improve its security safeguards after unauthorized access exposed login credentials for about 12.2 million users, with passwords for about 7.6 million of them stored in plaintext. The Japanese privacy watchdog separately instructed some of these providers to improve their security safeguards and urged affected users to change passwords also used for other online services. Statement is attached (in Japanese)....
Prepare for tomorrow’s regulatory change, today
MLex identifies risk to business wherever it emerges, with specialist reporters across the globe providing exclusive news and deep-dive analysis on the proposals, probes, enforcement actions and rulings that matter to your organization and clients, now and in the longer term.
Know what others in the room don’t, with features including:
- Daily newsletters for Antitrust, M&A, Trade, Data Privacy & Security, Technology, AI and more
- Custom alerts on specific filters including geographies, industries, topics and companies to suit your practice needs
- Predictive analysis from expert journalists across North America, the UK and Europe, Latin America and Asia-Pacific
- Curated case files bringing together news, analysis and source documents in a single timeline
Experience MLex today with a 14-day free trial.