Topic
Cybersecurity in Japan: cyberattacks, data breaches and government and regulatory policy affecting Japanese agencies, financial institutions and businesses.
Burger King Japan says attackers who accessed its app member system from Oct 2 to 7 reached 11.18 million customer records, and the data has leaked online. The company warned affected customers to watch for emails, SMS messages and calls that may impersonate it.
Reality
Daiichi Kosho, Japan's largest karaoke maker, says malware at Nippon Columbia, one of its contractors, left more than 8.7 million records on its customers and employees exposed. The data sat with the contractor, so one infected workstation there put 8.6 million karaoke customers in scope.
Perspective Coverage
4 publishersReality
More than 20 major Japanese companies have disclosed cyberattacks in recent weeks, the Financial Times reported. Tokyo's instructions to ministries and companies are basic. The recent cases put operators' exposure in their vendors and their ID handling.
Reality
Japan's FSA on 9 October called on banks to speed up chip-based IDs for new accounts, after over 20 major companies reported cyber incidents. The agency's examples are passports and MyNumber cards, so new-account identity checks are where the breach response reaches banks.
Reality
IDC Frontier says ransomware in its IDCF Cloud East Japan Region 1 has affected 495 companies and local governments using the service. The SoftBank Group subsidiary has also locked customers out of management consoles in every region while it verifies their security.
Perspective Coverage
3 publishersReality
Osaka Metropolitan University cancelled classes after a suspected ransomware attack stopped about 500 servers, Japanese media reported. Records on at least 130,000 current and former students, faculty and others may be exposed, though the university has not confirmed any theft.
Reality
Cisco Talos's tally of Japanese ransomware for January to July 2026 hands the country lead to The Gentlemen, a crew that was not in last year's data and that listed 105 victims worldwide in July alone.
Reality
An intruder inside the work platform shared by Japanese ministries took names, emails and phone numbers belonging to 246,000 staff and contractors, and the agency says none of it has shown up in a confirmed case of misuse.
Reality