AI Security · Threat Intelligence
Japan declares cybersecurity emergency after wave of attacks on major firms
Japan has declared a cybersecurity emergency following a surge in attacks on major companies, with millions of customer records exposed. Experts suggest AI may be making attacks easier and more widespread.
Ross GrantUpdated 2 min read
The short version
Japan has announced a cybersecurity emergency because many companies have been attacked. Millions of people's data, such as email addresses, have been exposed. Experts think that new technology like AI might be making it easier for hackers to attack more companies. The government and businesses are now working to improve their defences.
By the numbers
- 20+companies reported attacksFinancial Times
- 1.67 millionJR East customer email addresses leakedPCMag
- tens of millionsestimated total customer records exposedPCMag
- first 9 months of 2026period with more incidents than all of 2025PCMag
What happened?
Japan has declared a cybersecurity emergency after a surge in attacks on its companies. Over 20 major firms, including JR East, Lawson, and Times Car, reported incidents leading to the loss of tens of millions of customer records. The government described the situation as 'extremely critical.'
Surge in Attacks Prompts National Emergency
Japan has declared a cybersecurity emergency after a sharp rise in attacks on its companies. Over 20 major firms have reported incidents in recent weeks, including well-known brands such as the Lawson convenience store chain, Times Car rental, and JR East, the country's largest rail operator. According to the Financial Times (opens in a new tab), these attacks have led to the loss of tens of millions of pieces of customer data.
What Was Stolen and Who Is Affected
Among the incidents, JR East reported that 1.67 million customer email addresses were leaked from its booking system. Other affected companies include car rental operators and restaurant chains. The full extent of the data loss is not yet clear, but reports suggest that the number of affected individuals could be in the tens of millions. The attacks have targeted a wide range of businesses, not just large corporations but also smaller services.
Government Response and Expert Views
Japanese cybersecurity minister Toshiharu Furukawa described the situation as “extremely critical” at a meeting of the National Cybersecurity Strategy Headquarters. Masaaki Taira, head of the same body, called it an “emergency in cyberspace.”
Experts are considering whether artificial intelligence (AI) has played a role in the recent surge. Masaki Hiraoka of Blackpanda told the Financial Times that AI tools may be making it easier for attackers to target smaller services that were previously ignored. Nobuo Miwa, president of S&J Corp, compared the attacks to “carpet bombing” and suggested that AI could be helping foreign hackers overcome language barriers when targeting Japanese firms (PCMag (opens in a new tab)).
The Bigger Picture: Trends and Uncertainties
According to data from TrendAI, Japan recorded more cybersecurity incidents in the first nine months of 2026 than in all of 2025. This suggests a significant increase in the frequency and scale of attacks. However, it is not yet clear exactly how attackers gained access to the systems or whether AI was directly involved in these incidents. The government has not released technical details or named any suspects.
What Happens Next and Practical Advice
The declaration of a cybersecurity emergency is a rare step and signals that both the government and private sector need to review their defences. Companies are likely to increase monitoring and incident response efforts. For individuals, it is important to watch for notifications from affected companies, be wary of phishing emails, and consider changing passwords if you have accounts with the firms mentioned. As the situation develops, more details may emerge about the methods used and the scale of the breaches.
Claimed vs confirmed
- Unconfirmed
AI is enabling hackers to attack more targets, including smaller services.
Experts quoted by the Financial Times and PCMag suggest AI may be making attacks easier, but no direct link has been confirmed.
- Confirmed
Attacks are being compared to 'carpet bombing'.
Nobuo Miwa of S&J Corp described the attacks as 'carpet bombing' in a statement to Reuters.
The impact
- Money
- No direct financial losses have been reported. However, under Japanese law and international standards, companies suffering data breaches could face regulatory scrutiny and possible fines.
- Reputation
- The incident may damage trust in affected companies and in Japan's overall cyber defences, especially as well-known brands are involved.
- Customers
- Millions of people may have had their personal data exposed. Customers should watch for notifications from affected companies and be alert for phishing or fraud attempts.
Why it matters
Millions of people in Japan may have had their personal information exposed. The attacks show that even large, well-known companies can be vulnerable. The situation highlights the need for stronger cybersecurity measures and raises questions about the role of AI in making attacks easier.
How does it work?
Experts suggest that artificial intelligence (AI) may be enabling attackers to automate and scale up their efforts, making it easier to target a wider range of companies, including those previously considered too small to be worth the effort. AI tools may also help attackers overcome language barriers.
Key points
- Japan declared a cybersecurity emergency after a surge in attacks.
- Over 20 major companies reported incidents, with millions of records exposed.
- Experts suggest AI may be making attacks easier and more widespread.
- The government described the situation as 'extremely critical.'
- Individuals should watch for updates from affected companies and be alert for phishing.
Sources
Financial Times
Reference
PCMag
Reference
