Japan’s Cyber Emergency Exposes a Wider Race Against AI-Enabled Crime
Japan’s Cyber Emergency Exposes a Wider Race Against AI-Enabled Crime
In early October, Japan put a new cyber-defense law into force, allowing police and the military to monitor—and in some cases disable—overseas servers and infrastructure judged to threaten national security. It also requires companies to report cyber breaches.
That legal shift was followed by a punishing few weeks. Hackers tampered with servers, knocked local-government websites offline and accessed large volumes of consumer data. A public university suspended classes for a week; a car-sharing company reported that more than 1 million personal documents, including licence photos and home addresses, had leaked; and a ransomware strike on a SoftBank-owned cloud operator affected nearly 500 companies and local bodies, including a rail operator and police headquarters.
By Friday, Masaaki Taira, a former digital minister who leads the ruling Liberal Democratic Party’s cybersecurity committee, said Japan was in “a state of emergency in cyberspace.” The scale is stark: TrendAI recorded 600 reported attacks in the first nine months of 2026, more than in all of 2025.
Officials and experts agree the immediate motive appears to be profit—ransom payments or stolen data sales—not necessarily geopolitics. Technology specialist Koichiro Fujii said the early assessment did not point to a coordinated, state-backed campaign: Japan is being hit because unpatched infrastructure offers hackers the highest return.
But AI has sharpened the risk. Takahiro Anno, a technology expert, said machine-generated translation has weakened the Japanese-language barrier that once made phishing attempts easier to spot. Automation can also scan relentlessly for exploitable flaws.
Digital Transformation Minister Toshiharu Furukawa said attacks now touch “all industries,” as the government issues alerts, urges deletion of unnecessary personal data and pushes two-factor authentication. Yet he cautioned that investigators are still working out whether AI was used.
For systems-security professor Katsunari Yoshioka, the stakes extend beyond stolen files: such attacks can cause “the suspension or degradation of systems and services that are important to society.” His prescription is international cooperation, since the infrastructure behind the assaults is unlikely to sit solely inside Japan.
Write a comment