Japan Digital Agency data breach

Japan’s Digital Agency reported a potential leak of personal data affecting approximately 246,000 individuals. The breach was traced to unauthorized access through the Government Solution Service (GSS) network, where an intruder exploited a vulnerability in a virtual private network (VPN) device.

The compromised information includes names, email addresses, phone numbers, and addresses. The affected group consists of roughly 189,000 government employees and officials, as well as 57,000 business operators or individuals involved in government operations. The agency stated that general public personal information, My Number details, financial account information, and pension numbers were not part of the leak.

Suspicious activity was detected in late June via a maintenance account. In response, the agency disabled the account and blocked external communications from the compromised equipment. While no misuse of the data has been confirmed, the agency has advised the affected individuals to watch for phishing attempts, suspicious emails, and SMS messages.