I watched the help desk technician try and reboot the terminal while a ransom note stared back at him. You felt the same small panic when your smart card stopped working and the line at the bank grew suspiciously long. The country moved from inconvenience to crisis in the time it took a server to timeout.
Lights went on at the National Cybersecurity Office — and the meeting said everything about scale
I read the Financial Times dispatch and felt that tightening in the chest you get before bad news lands. Japan’s ruling Liberal Democratic Party summoned an emergency meeting of its National Cybersecurity Office after a wave of attacks swept through critical firms. This wasn’t a notification about a single breach; it was the political machine reacting to a systemic failure.
You should know who is talking: the LDP, law enforcement and regulators are now treating cyber incidents like national emergencies. When politicians start convening, responses shift from IT triage to policy and blame—fast.
At least 53 companies reported ransomware — the scale is raw and public
Kyodo News, citing Japan’s National Police Agency, reported at least 53 companies were hit by ransomware. That is not a one-off; it is a campaign.
Is Japan under cyberattack?
Yes. The attacks span manufacturing, construction, hospitals and schools—some names held back by authorities, others confirmed publicly. Bookoff Group and East Japan Railway Company (JR East) confirmed intrusions and warned that more than 6 million customer records may have been exposed. When rail and retail both raise the alarm, the signal is clear.
I keep a mental checklist for damage: data stolen, operations interrupted, reputational fallout. You should have one too.
Times Car leaked ID images — now banks are changing their frontline rules
After Times Car reported a breach of digital ID photos, Japan’s financial regulator warned banks not to accept driver’s licenses as proof of identity for new accounts. That small procedural change reveals how fragile trust is when identity stores are compromised.
Think about the practical fallout: branches turn away would-be customers; onboarding grinds to a halt; criminals exploit the confusion. Bookoff and JR East combined to push millions of records into the wild — that isn’t theoretical risk, it’s active damage.
CrowdStrike’s trace in South Korea — AI may be the tool, not the mastermind
CrowdStrike released a report suggesting some recent attacks were carried out by a Chinese-developed AI agent using Anthropic’s Claude Code, and Reuters amplified the finding across the region.
Are AI tools being used to carry out these hacks?
Evidence points to automation and generative tools lowering the technical bar. AI can write code, adapt exploits, and orchestrate campaigns at a speed humans struggle to match. The attacks spread like wildfire across exposed endpoints, harvesting easy targets while defenders scrambled.
I don’t mean to ascribe agency to the models themselves—Anthropic’s tools are platforms; the intent lies with operators—but the speed and scale feel new. You and I both know a smarter script changes the game.
Outdated systems and underinvestment — a structural weakness in plain sight
Security researchers and outlets like InCyber News pointed to decades of aging IT and limited cyber budgets long before this month’s headlines. That background made Japan a target-rich environment.
When defenses are paper-thin, modern attack tooling turns small faults into widescale outages. Corporate security teams found themselves exposed, their measures feeling like cardboard shutters against a hurricane.
How many companies in Japan were affected by ransomware?
Authorities report at least 53 firms; some victims remain unnamed. Expect that figure to rise as investigations keep unspooling.
Regulators are reacting fast: id verification rules, emergency meetings, and public warnings. Private firms are calling in vendors—CrowdStrike, other incident response teams, and forensic specialists—to triage and trace. I’ve advised boards before: crisis is when leadership either acts or hides; the market remembers both.
You can treat this as distant news or a template for your own risk planning. Either way, the question that will frame every boardroom and branch office from Tokyo to Seoul is simple: who pays when the next blackout hits, and who will hold the giants accountable?