Japan is facing a significant surge in cyberattacks that is raising alarms across its corporate and government sectors, underscoring the growing challenge of digital security in an era of advancing artificial intelligence. Recent incidents have targeted a wide range of organizations, from financial institutions and technology firms to railway operators and consumer businesses, highlighting the breadth and scale of the problem.

In the past few weeks, notable victims in Japan have included brokerage firm Daiwa Securities, SoftBank’s cloud subsidiary IDC Frontier, East Japan Railway Company (JR East), convenience store chain Lawson, car rental service Times, as well as major karaoke and grilled meats restaurant chains. Tokyo-based cybersecurity firm Trend Micro reported that publicly disclosed breaches affecting customer data through September exceeded the total number recorded in 2025, indicating an accelerating trend.

The head of the ruling Liberal Democratic Party’s cybersecurity unit described the situation as a “state of emergency in cyberspace.” While global ransomware attacks declined by 3% between July 2025 and June 2026, attacks in Japan increased sharply by 67%, suggesting a disproportionate impact on the country. Experts attribute this rise partly to the use of artificial intelligence tools that automate the exploitation of longstanding security vulnerabilities, making cybercrime easier and more cost-effective.

A notorious Russian-speaking hacking group known as Qilin, which claimed responsibility for a 2025 attack on beer-maker Asahi, predicted that Japan would see a continuing rise in cyberattacks against both private companies and government agencies. The group criticized Japan’s cybersecurity posture, calling it one of the weakest worldwide.

In response, Japan’s government convened a cross-ministry meeting on October 8 and urged financial institutions and approximately 1,000 industry groups to strengthen their cybersecurity defenses. Finance Minister Satsuki Katayama called for immediate reviews of security measures, though some analysts consider the current official guidance—such as checking system logs and patching vulnerabilities—insufficient for the complexities of AI-driven threats.

While major corporations have increasingly fortified their systems, the vast majority of Japanese firms are small and medium-sized enterprises, which account for about 99% of businesses in the country. A recent survey by the Ministry of Economy, Trade and Industry found that roughly 70% of these smaller companies lack adequate cybersecurity protections, leaving them vulnerable to exploitation and posing risks to the broader supply chain ecosystem.

Japan’s cybersecurity talent shortage compounds the issue, prompting calls for sustained investment in training and resources. Observers suggest that national strategies should treat cyberresilience as a fundamental priority, comparable to disaster preparedness.

The cyber threat is not confined to Japan. South Korea recently experienced cyberattacks on major banks and religious institutions, with some attributed to financially motivated actors employing AI-assisted tools. France saw hundreds of supermarket locations disrupted by attacks that disabled refrigeration systems, leading to spoilt food. In Australia, unauthorized access by an AI agent to a government health portal was reported in September.

These incidents highlight the transnational nature of cyber threats and the need for enhanced information sharing and cooperation between governments and the private sector. Industry experts emphasize the responsibility of AI developers to mitigate misuse by integrating safeguards and supporting defensive capabilities to counter increasingly sophisticated attacks.

For now, Japan’s attackers have primarily targeted customer data, but cybersecurity analysts warn that the situation could escalate. The current wave serves as an early indication of the challenges ahead as AI-empowered cybercriminals continue to evolve their tactics worldwide.