[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

6 clusters · 25 sources · 20 days · First seen · Last updated

Japan active cyber defense and infrastructure protection

Overview

Japan has initiated a new era of ‘active cyber defense’ following the implementation of the ‘Cybersecurity Capability Enhancement Act’ on October 1. This legislative framework authorizes the police and the Ministry of Defense to perform ‘neutralization measures,’ such as remotely accessing and altering settings on servers used by malicious actors to prevent attacks before they cause damage. Building on this legal foundation, the Japanese government announced plans for fiscal 2027 to enhance threat hunting capabilities specifically for critical infrastructure, including power and telecommunications. On October 12, the government declared a cybersecurity emergency following a wave of significant data breaches and ransomware attacks affecting the finance, transport, and retail sectors. More than 20 large companies have reported incidents, with the total number of recorded attacks in 2026 already exceeding the previous year’s total. Notable breaches include a ransomware attack on IDC Frontier, a SoftBank-linked cloud provider, which impacted 495 organizations, and unauthorized access at Times Mobility involving approximately 6.6 million accounts. JR East also reported the potential leak of 1.67 million customer email addresses, while Dai-ichi Life Group reported a potential leak of personal information for approximately 120,000 employees. Specific details regarding the SoftBank Group’s ‘IDCF Cloud’ breach emerged on October 19, noting that the ransomware attack occurred on October 7. The incident affected all customers utilizing specific data centers, though some were able to restore data from backups. This event has coincided with a broader trend of unauthorized access and information leakage, prompting warnings from various institutions regarding the necessity of immediate security audits and improved log utilization. Following these incidents, cybersecurity demand has surged across Japan. In Ishikawa Prefecture, IT firms report a rise in consultations, with some companies seeing sales increases of approximately 30 percent.

Entities

Government of Japan · Times Car · Sanae Takaichi · SoftBank Group · IDCF Cloud

Claims

What the coverage asserts, and how many sources carry each claim.

Coverage disagrees

Sources make claims that cannot both be true. CLSTR reports the disagreement; it does not decide who is right.

  • "No unauthorized access to customer information has been confirmed in the Dai-ichi Life Group incident." scan.netsecurity.ne.jp

    vs

    "Personal information of approximately 120,000 current and former employees of Dai-ichi Life Group and Dai-ichi Life Insurance may have been leaked." scan.netsecurity.ne.jp

    One claim states that personal information of 120,000 employees may have been leaked, while the other states that no unauthorized access to customer information has been confirmed.

Timeline

  1. [TECHNOLOGY] 3 sources
    IDCF Cloud hit by ransomware attack amid rising cyber incidents in Japan

    A surge in cyberattacks in Japan, highlighted by a ransomware attack on SoftBank Group’s IDCF Cloud in October 2026, has prompted urgent calls for improved organizational security measures.

  2. [TECHNOLOGY] 2 sources
    Cybersecurity demand rises in Japan amid increasing attack threats

    Cybersecurity demand is growing in Japan, with IT firms seeing increased sales and police hosting seminars for executives to prepare for rising cyberattack threats.

  3. [TECHNOLOGY] 15 sources
    Japan declares cyberspace emergency amid wave of cyberattacks

    Japan has declared a cyberspace emergency following a massive wave of cyberattacks affecting hundreds of organizations and millions of users, including major leaks of identity documents and employee data.

  4. [TECHNOLOGY] 2 sources
    Japan strengthens cybersecurity response amid surge in unauthorized access

    Japan is ramping up cybersecurity defenses following a surge in unauthorized access and AI-driven attacks. The government is centralizing incident reporting while private firms launch emergency support services

  5. [TECHNOLOGY] 3 sources
    Japan to enhance threat hunting for critical infrastructure

    Japan will launch a fiscal 2027 initiative to bolster threat hunting for critical infrastructure, using virtual simulations and Defense Ministry personnel to detect hidden cyber attackers.

  6. [TECHNOLOGY] 3 sources
    Japan implements active cyber defense measures

    Japan has launched ‘active cyber defense’ operations following the implementation of new cybersecurity laws, allowing authorities to preemptively neutralize cyberattacks on critical infrastructure.

Sources

adnKronos.com · allaboutgod.com · asagumo-news.com · atmarkit.co.jp · biz-journal.jp · bizmakoto.jp · cloud.watch.impress.co.jp · cn.nytimes.com · cybernoz.com · dialogointercultural.co · fnn.jp · gentosha-go.com · hokkoku.co.jp · internet.watch.impress.co.jp · iussp.org · jisin.jp · jugem.jp · mindef.gov.sg · minutodaseguranca.blog.br · news.mynavi.jp · noticiasemportugues.co.uk · scan.netsecurity.ne.jp · shimotsuke.co.jp · techfactory.itmedia.co.jp · weekly.ascii.jp

This summary has been updated 8 times: see revision history