Japanese operator suffers massive data leak

Japanese mobile phone and Internet company KDDI reported that private information such as names and addresses of some 4 million subscribers to its Internet access service had been leaked to a third party, a Kyodo News International report said.

The report said Tokyo police had arrested two men on suspicion of attempting to extort 5 million to 10 million yen from KDDI, saying they had personal information on the more than 4 million customers.

The two were identified as Akio Minomura, 57, from Kawasaki, Kanagawa Prefecture, and Akihiko Torii, 47, from Adachi Ward in Tokyo, the report said. The data leaked included names, addresses, telephone numbers, sex, email addresses and birthdates of those people who applied for the service by December 18, 2003, including those who canceled their accounts before or after, KDDI president Tadashi Onodera was quoted as saying.

The "leakage" covered a total of 3,996,789 customers, he said.

Information such as their bank account details, passwords and communications logs had not been released, he said.