# Cyberattacks on Japanese retail, educational, and public-tax

> Live situation record from CLSTR: https://clstr.news/situations/cyberattacks-on-japanese-retail-and-online-services
> Updated: 2026-10-19T21:00:03.000Z. Sources: 15. Developments: 2.

Following the discovery of unauthorized access to internal systems on October 15, Geo and its parent company, Second Retailing, suspended several online services. While physical retail locations remained open, the company worked to determine the scope of the impact. Other entities, such as Golf Digest Online, confirmed specific data breaches involving employee and customer identifiers.

On October 19, the scope of disruptions expanded. Retailer Joshin announced its network was compromised, noting the “possibility of personal information leakage cannot be ruled out.” Additionally, the educational corporation Shudo Gakuen reported unauthorized access that potentially exposed names, addresses, and bank account information of faculty and partners.

New reports indicate a significant surge in attacks across various sectors. The hometown tax portal ‘Furusato Choice,’ operated by Trust Bank, suffered a massive leak of approximately 4.45 million pieces of personal information, including names, addresses, phone numbers, and hashed passwords. In the financial sector, Iwai Cosmo Securities reported that an attack on an external contractor led to unauthorized trading orders in seven accounts.

Security researchers at GMO Cyber Security by Ierae identified the use of ‘ARTEX,’ an AI-driven autonomous penetration testing tool, in attacks targeting roughly 80 Japanese companies. Experts warn this tool allows attackers to automate complex tasks, such as bypassing Web Application Firewalls. The impact has also reached the public sector, with potential data leaks reported in several prefectural police departments and a Ministry of Land, Infrastructure, Transport and Tourism subsidy program.

## Timeline

### 2026-10-19: Japan faces wave of cyberattacks targeting corporations and government agencies

Japan is grappling with a series of major cyberattacks, including a 4.45 million-record leak at Furusato Choice and the use of AI-driven tools targeting dozens of companies and government agencies.

12 sources. https://clstr.news/cluster/cyberattacks-hit-geo-online-and-golf-digest-online-in-japan

### 2026-10-17: Geo suspends online services following unauthorized system access

Geo and Second Retailing have suspended Geo Online services and implemented emergency maintenance following unauthorized access to their internal systems discovered on October 15.

4 sources. https://clstr.news/cluster/geo-suspends-online-services-following-unauthorized-system-access

---
Cite as: Cyberattacks on Japanese retail, educational, and public-tax. CLSTR, https://clstr.news/situations/cyberattacks-on-japanese-retail-and-online-services
