Enforcement record
Directive disclosure naming KDDI株式会社
This page records one action from a Japanese government disclosure, including the published name, governing law, authority, action details, and official source.
Action type
Directive
Law
Telecommunications Business Act
Authority
Ministry of Internal Affairs and Communications
Action date
29 July 2026
Current page: Enforcement record
This screen focuses on one disclosed action: the published name, governing law, authority, facts, source status, and review evidence.
Source verification
Public-source and preservation status
- Publishing authority
- Ministry of Internal Affairs and Communications
- Official source URL
- Recorded by RegBase
- Entity match
- Not confirmed; shown under the published name
- Kiroku preservation
- Queued for preservation
“Confirmed” means that RegBase matched this record to the cited public disclosure or entity under the stated checks. It does not verify the truth of the disclosure or guarantee the entity’s current status, creditworthiness, or any legal conclusion.
Available sources and saved files are listed in the public documents section below.
Public documents and saved materials
View the original publications, see what was preserved, or download each file below.
Loading materials…
Action summary
- Company
- KDDI株式会社Japanese onlyOriginal: KDDI株式会社
- Governing law
- Telecommunications Business Act電気通信事業法
- Action type
- Directive指示
- Action date
- 29 July 2026
- Issuing authority
- Ministry of Internal Affairs and Communications総務省
- Industry context
- 通信事業
- Affected consumers
- 7,620,000
Violation
On July 29, 2026, the Ministry of Internal Affairs and Communications issued a directive to KDDI Corporation under the Telecommunications Business Act. The company experienced a data breach caused by unauthorized external access to its email systems provided to multiple internet service providers. As a result, email addresses and login passwords were leaked, allowing a third party to access about 7.62 million users' email inboxes. The ministry instructed KDDI to strengthen the protection of communication secrets, implement necessary measures to prevent recurrence, and report on the status of these measures.
Show original Japanese text
KDDI株式会社が複数のインターネットサービスプロバイダ向けに提供するメールシステムにおいて、外部からの不正アクセスに起因し、ユーザーのメールアドレスやメールシステムへログインするためのパスワード等のメール関連情報が漏えいし、パスワードを窃取した第三者において、約762万人のユーザーのメールボックス内の情報が閲覧可能な事態となった。
Business location and permit details
- Representative
- 松田 浩路
These fields are extracted from the original Japanese disclosure or linked overview pages when available.
Compliance context
MediumA regulator issued a directive requiring specified action.
Telecommunications law governing telecommunications services and related user protection obligations.
Verify the required action and whether the company has disclosed remediation or completion.
This context is an operational aid for review workflows, not a credit opinion or legal conclusion.
Language
日本語版を見る (Japanese)About this recordAggregated and translated from public Japanese government disclosures. The English text is for reference only — authoritative content is the linked Japanese source.