Enforcement record
Directive disclosure naming KDDI株式会社
This page records one action from a Japanese government disclosure, including the published name, governing law, authority, action details, and official source.
Action type
Directive
Law
Telecommunications Business Act
Authority
Ministry of Internal Affairs and Communications
Action date
29 July 2026
RegBase evidence report
Japanese public-record enforcement check
Saveable record of the published action, regulator source, source status, and review notes for internal compliance files.
- Report ID
- RB-EN-ENFORCEMENT-DENKI-TSUSHINHO-K-202607291412
- Generated at
- 29 July 2026 at 23:12
- Record URL
- https://regbase.jp/en/enforcement/denki-tsushinho-kddi-20260729
1. Review Summary
| Disclosure name | KDDI株式会社 | Corporate Number | Not stated in the disclosure |
|---|---|---|---|
| Enforcement record | 1 record | Other confirmed records for this company | Outside this report's scope |
| Action date | 29 July 2026 | Authority | Ministry of Internal Affairs and Communications |
| Law | Telecommunications Business Act | Action type | Directive |
| Source status | Official source recorded; preserved archive is being prepared | ||
This report summarizes public Japanese government disclosure data held by RegBase. It is not a credit score, sanctions conclusion, legal opinion, or adverse-media determination. Confirm important decisions against the linked official Japanese source.
2. Published Information
| Published name | KDDI株式会社 |
|---|
3. Enforcement Record
| Target name in disclosure | KDDI株式会社 |
|---|---|
| Authority | Ministry of Internal Affairs and Communications (総務省) |
| Law / action type | Telecommunications Business Act / Directive |
| Action / announcement date | Action: 29 July 2026 / Announcement: 29 July 2026 |
| English summary | On July 29, 2026, the Ministry of Internal Affairs and Communications issued a directive to KDDI Corporation under the Telecommunications Business Act. The company experienced a data breach caused by unauthorized external access to its email systems provided to multiple internet service providers. As a result, email addresses and login passwords were leaked, allowing a third party to access about 7.62 million users' email inboxes. The ministry instructed KDDI to strengthen the protection of communication secrets, implement necessary measures to prevent recurrence, and report on the status of these measures. |
| Original Japanese text | KDDI株式会社が複数のインターネットサービスプロバイダ向けに提供するメールシステムにおいて、外部からの不正アクセスに起因し、ユーザーのメールアドレスやメールシステムへログインするためのパスワード等のメール関連情報が漏えいし、パスワードを窃取した第三者において、約762万人のユーザーのメールボックス内の情報が閲覧可能な事態となった。 |
| Financial / consumer impact | Penalty: - / Affected amount: - / Affected consumers: 7,620,000 |
| Official source | https://www.soumu.go.jp/menu_news/s-news/01kiban18_01000285.html |
| Extraction / evidence timestamps | Extracted: 29 July 2026 at 21:03 / Evidence checked: 29 July 2026 at 21:03 / Archive captured: Not recorded |
4. Business Location and Permit Details
| Representative | 松田 浩路 |
|---|
5. Other Confirmed Records for This Company
This report covers the single government disclosure shown on this page.
Reviewer Notes
| Reviewer | Team / company | ||
|---|---|---|---|
| Review purpose | |||
| Additional notes | |||
- □ Official source URL or archived source was checked.
- □ Corporate Number, address, or other identifiers were reviewed to avoid confusing similarly named entities.
- □ This document is understood as a public-record evidence file, not a credit decision or legal opinion.
Current page: Enforcement record
This screen focuses on one disclosed action: the published name, governing law, authority, facts, source status, and review evidence.
Free report
Save the disclosure record naming KDDI株式会社
Includes the published name, regulator, governing law, source links, archive status, and reviewer note fields for internal due-diligence files.
For developers: JSON integration details
You do not need this for normal browsing. Use it only when integrating this enforcement record into an internal tool or AI workflow.
Action summary
- Company
- KDDI株式会社Japanese onlyOriginal: KDDI株式会社
- Governing law
- Telecommunications Business Act電気通信事業法
- Action type
- Directive指示
- Action date
- 29 July 2026
- Issuing authority
- Ministry of Internal Affairs and Communications総務省
- Industry context
- 通信事業
- Affected consumers
- 7,620,000
Violation
On July 29, 2026, the Ministry of Internal Affairs and Communications issued a directive to KDDI Corporation under the Telecommunications Business Act. The company experienced a data breach caused by unauthorized external access to its email systems provided to multiple internet service providers. As a result, email addresses and login passwords were leaked, allowing a third party to access about 7.62 million users' email inboxes. The ministry instructed KDDI to strengthen the protection of communication secrets, implement necessary measures to prevent recurrence, and report on the status of these measures.
Show original Japanese text
KDDI株式会社が複数のインターネットサービスプロバイダ向けに提供するメールシステムにおいて、外部からの不正アクセスに起因し、ユーザーのメールアドレスやメールシステムへログインするためのパスワード等のメール関連情報が漏えいし、パスワードを窃取した第三者において、約762万人のユーザーのメールボックス内の情報が閲覧可能な事態となった。
Business location and permit details
- Representative
- 松田 浩路
These fields are extracted from the original Japanese disclosure or linked overview pages when available.
Compliance context
MediumA regulator issued a directive requiring specified action.
Telecommunications law governing telecommunications services and related user protection obligations.
Verify the required action and whether the company has disclosed remediation or completion.
This context is an operational aid for review workflows, not a credit opinion or legal conclusion.
Evidence pack
- Extracted at
- 2026-07-29T12:03:25.106+00:00
- Evidence checked
- 2026-07-29T12:03:25.035+00:00
- Archive captured
- Not archived
Show audit JSON
{
"record": {
"id": "19243302-02d5-4d94-aeaf-579db4d3c9a8",
"url": "https://regbase.jp/en/enforcement/denki-tsushinho-kddi-20260729",
"company_name_original": "KDDI株式会社",
"company_name_registry": null,
"corporate_number": null,
"law": {
"ja": "電気通信事業法",
"en": "Telecommunications Business Act"
},
"action_type": {
"ja": "指示",
"en": "Directive"
},
"authority": {
"ja": "総務省",
"en": "Ministry of Internal Affairs and Communications"
}
},
"entity_match": {
"status": "unresolved",
"confidence": 88,
"method": "nta_historical_strict_name_nationally_unique",
"method_label": "nta_historical_strict_name_nationally_unique",
"notes": "有力な法人候補がありますが、自動確定に必要な独立証拠が不足しています（nta_historical_strict_name_nationally_unique）。"
},
"review": {
"status": "needs_review",
"label": "Needs review"
},
"compliance_context": {
"severity": "Medium",
"actionMeaning": "A regulator issued a directive requiring specified action.",
"practicalNote": "Verify the required action and whether the company has disclosed remediation or completion.",
"lawContext": "Telecommunications law governing telecommunications services and related user protection obligations."
},
"evidence": {
"recordUrl": "https://regbase.jp/en/enforcement/denki-tsushinho-kddi-20260729",
"officialSourceUrl": "https://www.soumu.go.jp/menu_news/s-news/01kiban18_01000285.html",
"officialDocumentUrl": null,
"archiveUrl": null,
"archivedSourceUrl": null,
"archiveCapturedAt": null,
"extractedAt": "2026-07-29T12:03:25.106+00:00",
"translatedAt": "2026-07-29T12:10:52.901+00:00",
"evidenceCheckedAt": "2026-07-29T12:03:25.035+00:00",
"generatedAt": "2026-07-29T14:12:06.838Z"
},
"limitations": [
"RegBase aggregates public Japanese government disclosures and does not provide a credit opinion.",
"English summaries are provided for reference. The original Japanese source is authoritative.",
"Possible or unresolved entity matches should be manually verified before use in a decision."
]
}The original Japanese disclosure is the authoritative record. Use possible or unresolved matches only as leads for manual review.
Language
日本語版を見る (Japanese)About this recordAggregated and translated from public Japanese government disclosures. The English text is for reference only — authoritative content is the linked Japanese source.