Japan's State Races to Contain Corporate Cyberattacks

Dozens of businesses in Japan have reported unauthorized access to their systems and possible leaks of client data, prompting Prime Minister Sanae Takaichi to promise an emergency cybersecurity package by next week. The response puts government authority at the center of a crisis whose immediate costs include exposed customer information and reported financial losses. The businesses and their clients are left facing the consequences while officials prepare the next set of measures.

The Emergency Response

At an emergency meeting of cabinet ministers, Takaichi said Japan would also join global efforts to identify the attackers. She described the situation as serious, citing growing anxiety about the misuse of leaked information. “It is necessary to swiftly step up countermeasures,” she said. “By next week, the government will compile an emergency package of measures.”

That is the state’s announced answer: assemble a package and help identify those responsible. The base account does not detail what the measures will contain, who will oversee them, or how they will protect the people whose information may have been exposed. For now, the promised action is a government plan still being compiled, not a set of measures already in place.

The government’s role is visible; the response from affected customers is not. The account reports no customer-led organizing, mutual aid, or other community response. It also mentions no electoral or legislative proposal. There is no reported path for people affected by the breaches to shape the package Takaichi has promised. The decisions described so far sit with cabinet ministers and government officials.

Companies, Customers and the Attack

An information security arm of Japanese IT firm GMO Internet Group Inc. said last week that a Chinese artificial intelligence cybersecurity tool called Artex was used in several recent hacks of Japanese companies. The tool’s developer says Artex was designed to help organizations enhance cyber defenses through AI-powered security testing to find potential weak points. That account describes the developer’s stated purpose; it does not establish who used the tool or who carried out each reported hack.

GMO Internet Group itself was attacked. Its founder and chief executive officer, Masatoshi Kumagai, said in a statement dated Sunday that a hacker demanded US$50 million (RM204 million) from the firm by last Wednesday in connection with a hack. The reported demand places the company under pressure, while the broader wave has also put client data at risk. The article does not say whether GMO paid the demand.

Losses Reach Financial Customers

Japanese Finance Minister Satsuki Katayama said Tuesday that five foreign exchange firms reported customer losses to the Financial Services Agency in connection with a cyberattack on GMO Internet Group Inc. Katayama said she had urged financial institutions to take appropriate measures to prevent further losses following unauthorized access to GMO. The account gives no amount for those customer losses and does not name the firms.

AI’s ability to find previously unknown ways to hack computer systems is in the global spotlight as leading labs release increasingly advanced models, the article reports. But the concrete details here remain narrower: businesses reported unauthorized access and potential data leaks; a company’s founder reported a $50 million demand; and a finance minister said five firms reported customer losses. The emergency package is still to come. The people exposed to the consequences are already part of the story.