Japan has issued a nationwide cybersecurity alert as a rising number of cyberattacks target businesses and compromise the personal information of millions of customers. Several major companies, including convenience store operator Lawson, Daiwa Securities and second-hand retailer BookOff, have reported data breaches. A recent attack on car-sharing service Times Car also exposed information associated with approximately 6.6 million customer accounts.
As cyberattacks become more frequent and sophisticated, the Japanese government is urging businesses and individuals to strengthen their cybersecurity practices.
“Cyberattacks are increasing in both quality and quantity, the methods are becoming more sophisticated, and they are having a tremendous impact on people's lives, and of course, causing significant disruption to business activities,” said Toshihiro Furukawa, Japan’s Digital Transformation Minister.
The government has appealed to companies and individuals to reinforce fundamental security measures while coordinating with relevant agencies to tackle the growing threat. According to Reuters, Japan’s National Cybersecurity Office has also issued instructions to government ministries for circulation among local authorities and private-sector organisations.
Japan witnesses a steep increase in cyberattacks
A study published by newspaper Yomiuri in collaboration with Tokyo-based cybersecurity company Trend Micro found that Japan has experienced more than 500 cyberattacks so far this year. The country recorded 473 incidents last year and 503 in 2024, suggesting that the current year could see a new record.
Separate figures cited by Reuters indicate that Japan reported more cybersecurity incidents during the first nine months of this year than throughout the whole of last year. Incidents rose to 86 in September, an increase of approximately 18 per cent compared with August and 37 per cent compared with July.
The data breaches have compromised sensitive information, including driving licence details, contact information and other personal data. Authorities have cautioned that such information could be exploited for identity theft, fraudulent bank transfers and other scams.
“Once such information is leaked, it can lead to secondary damage such as identity theft, fraudulent money transfers, and other scams,” Furukawa said.
The government has advised people against reusing passwords and encouraged them to activate multi-factor authentication wherever possible. It has also urged individuals to exercise caution when dealing with suspicious emails and text messages impersonating legitimate businesses or government agencies.
Reports suggest that artificial intelligence could be contributing to the increase in cyberattacks by helping hackers identify software vulnerabilities and generate phishing messages more easily.
South Korea also confronts cybersecurity threats
Japan is not the only country dealing with an escalating cyber threat. In South Korea, nine banks and two mega-churches are investigating attacks that may have involved the use of AI tools.
Government figures show that South Korea recorded 1,236 cyber incidents during the first half of this year, marking a 20 per cent increase compared with the same period a year earlier.
Experts have warned that AI-powered cyberattacks could become increasingly difficult to identify as criminals use the technology to automate a greater portion of their activities.
