4 million customer records from KDDI’s DION Internet service were leaked, leading to an extortion case against the company. The perpetrator was arrested on June 13.

The leaked data consisted of customer information current as of December 2003. More precisely, it reportedly contained 4.5 million records covering the names, addresses, and telephone numbers of 3.99 million6789 people, as well as gender, date of birth, and email address for some customers.

For details, see the Personal Information Protection Blog.

This incident raises important questions about access management and related issues.