Incident Response · GRC
Japan launches emergency cybersecurity package after wave of attacks
Japan has announced a ¥10 billion emergency cybersecurity package after dozens of companies and government agencies suffered data breaches and unauthorised access.
Ross Grant2 min read
The short version
Japan has faced a series of cyberattacks affecting many companies and government agencies. In response, the government announced a large emergency package to improve cybersecurity. This includes using artificial intelligence, forming expert teams, and helping organisations recover from attacks. The aim is to make Japan better prepared for future cyber threats.
By the numbers
- ¥10 billiontotal emergency cybersecurity package fundingBloomberg
- dozenscompanies and government agencies affected by attacksSecurityWeek
What happened?
Japan’s Prime Minister announced a ¥10 billion emergency cybersecurity package on 6 November 2026, after dozens of companies and government agencies suffered unauthorised access and data breaches. The package includes new AI-powered defences, expert response teams, and support for victims. The government aims to strengthen national cyber resilience following these incidents.
Who is affected
According to SecurityWeek (opens in a new tab), dozens of Japanese companies and government agencies have recently experienced unauthorised access to their systems and leaks of client data. The reporting does not name specific organisations, but states that the impact has reached both the public and private sectors, affecting daily life and business operations across Japan.
What was taken
The sources say that the attacks led to leaks of client data. There are no details yet on the types of data exposed or the number of people affected. The reporting only confirms that the breaches were significant enough to prompt a national response.
The response
On 6 November 2026, Prime Minister Sanae Takaichi announced an emergency cybersecurity package worth around ¥10 billion (about $63 million), as reported by Bloomberg (opens in a new tab) and SecurityWeek (opens in a new tab). The package aims to strengthen Japan’s defences and response capabilities against cyberattacks. Key measures include:
- Using artificial intelligence (AI) to improve detection and response to attacks.
- Setting up a "top gun" team of cybersecurity experts by the Ministry of Economy, Trade and Industry. This team will use AI to counter hackers and find weaknesses in networks, working with technology companies and AI developers from allied countries.
- Creating a "cyber rescue team" made up of public and private sector experts to help companies hit by attacks.
- Providing support for vulnerable companies to improve their defences.
- Enhancing the government’s ability to access servers used by hackers, a practice called "active cyber defence", which was legalised in Japan in October 2026.
- Deploying support teams from the Defence Ministry, National Police Agency and National Cybersecurity Office if national security is at risk.
The government’s goal is to build a more resilient society, with better information sharing and faster recovery from attacks.
What you should do
Prime Minister Takaichi urged all government agencies and companies to step up their preparedness. While the package focuses on large-scale national measures, organisations in Japan are being encouraged to review their own security, improve incident response plans, and stay alert for suspicious activity. Individuals should be cautious about sharing personal information and watch for signs of data misuse.
Timeline
- October 2026: Japan legalises "active cyber defence".
- Early November 2026: Reports of a wave of attacks on Japanese companies and agencies.
- 6 November 2026: Emergency cybersecurity package announced by Prime Minister Takaichi.
Why it matters
Japan’s response shows how governments can act quickly after major cyber incidents. The use of AI and dedicated response teams could set a model for other countries facing similar threats. It also highlights the growing risk of large-scale attacks affecting both public and private sectors.
Key points
- Japan announced a ¥10 billion emergency cybersecurity package.
- Dozens of companies and government agencies were hit by cyberattacks.
- The response includes AI-powered defences and expert teams.
- Active cyber defence has been legalised in Japan.
- Organisations are urged to improve their own security measures.
Sources
Bloomberg
Reference
SecurityWeek
Reference
