KDDI reports a major cyberattack exposing 12 million emails, with five clients also affected via a third-party software vulnerability, TechRadar reports.