AI-armed hackers tear through corporate Japan’s neglected defences
Quick Look
- More than 500 corporate system breaches were reported in Japan from the start of the year to this month, exceeding the total for all of 2025, according to Yomiuri newspaper.
- A ransomware attack on IDC Frontier on October 7 disrupted systems used by 495 companies and local authorities, compromising over 6 million customer accounts at JR East and leaking data from 6.43 million BookOff members.
AI-generated summary
Why It Matters
The report indicates a significant increase in cyberattacks targeting Japanese corporate and public systems, with October's IDC Frontier breach affecting hundreds of organizations.
More than 500 breaches of corporate systems were reported in the year to this month, surpassing the total for all of 2025, the Yomiuri newspaper reported last week.
On October 7, a ransomware attack on IDC Frontier – a Japanese cloud hosting and data centre services provider – paralysed systems used by 495 companies and local authorities in the country.
Those affected included railway operator JR East, which confirmed that more than 6 million customer accounts had been compromised. Used book retailer BookOff also reported that data belonging to 6.43 million members had leaked.
Open Questions
- What specific vulnerabilities were exploited in the IDC Frontier attack?
- Are the breaches linked to a single threat actor or group?
- What regulatory or legislative responses are being considered in Japan?
- Have any ransom demands been made or paid in these incidents?
