
Certification of systems with excellent countermeasures against cyber attacks, with plans to provide subsidies to medical institutions in 2027
The Ministry of Health, Labor and Welfare has established a system to certify excellent cyber-attack countermeasure systems within this fiscal year in order to popularize ``cloud-type'' electronic medical records that manage medical information on the Internet, and has decided to provide financial assistance for the introduction of such systems to medical institutions as early as 2027.
AI-generated summary
Electronic medical records are systems that manage medical treatment details and test results electronically, and the government has set a goal of introducing them at almost all medical institutions by 2030.
The Ministry of Health, Labor and Welfare plans to support medical institutions that introduce ``cloud-type'' electronic medical record systems that manage medical treatment details over the Internet using external servers. In addition to creating a system within this fiscal year in which the ministry certifies systems with excellent countermeasures against cyberattacks, subsidies will be provided to medical institutions that introduce them in fiscal 2027.
Medical DX command tower organization launched to promote the spread of electronic medical records
Electronic medical records are systems that manage medical treatment details, test results, etc. as electronic data and can be shared within medical institutions. As of June this year, the adoption rate was 72.6% for clinics and 73.5% for hospitals with 199 beds or less. The government has set a goal of introducing it in almost all medical institutions by 2030.
Currently, in large hospitals with over 200 beds, where the adoption rate is over 80%, the ``on-premises'' model, where information is managed on servers installed within the hospital, is the mainstream. While it has the advantage of being able to flexibly set data input methods depending on the type of business, it has also been pointed out that it also has disadvantages, such as the increased risk of cyber attacks because multiple external companies are involved in maintenance and operation.
On the other hand, cloud-based services are centrally maintained and operated by the service provider, making it easier to implement security measures and reduce operating costs.
Therefore, the Ministry of Health, Labor and Welfare certifies cloud-based systems that meet standards regarding security measures. Certified systems will be posted on the ministry's website to encourage clinics and other clinics to adopt them, and large hospitals will be encouraged to migrate from on-premises systems. The plan is to subsidize some of the installation costs.
AI outlook — possibilities, not facts
The Ministry of Health, Labor and Welfare will establish a security certification system for cloud-based electronic medical records within this fiscal year.
Very likely · Within months
Subsidy will be provided to medical institutions that will adopt the system in 2027.
Likely · Within months

In FY2027, the government will strengthen the creation of detection methods and information sharing for ``threat hunting,'' which investigates intrusions and hiding situations between the public and private sectors, in order to protect critical infrastructure such as electricity and communications from cyberattacks. The aim is to prevent infrastructure outages in emergencies.
Shoe manufacturer Moonstar announced on October 2 that the names, addresses, phone numbers, email addresses, and past order information of online store users may have been leaked due to unauthorized external access to its system server. This is a follow-up to the suspected unauthorized access announced on March 26th, and an internal investigation revealed the possibility of unauthorized login and information acquisition. Phishing emails were also confirmed to be sent, and countermeasures were taken, including blocking external connections to the server and forcing password changes. Credit card numbers and passwords are not stored on the relevant server.
On October 2, Abba House International announced that customers' personal information may have been leaked due to unauthorized access to its internal systems by a third party. On September 28th, multiple customers contacted us about a suspicious refund notification email that matched their order information, and this was discovered as a result of an investigation. Information that may be leaked includes member IDs, names, addresses, phone numbers, email addresses, dates of birth, gender, and order information, and may even affect customers who have withdrawn from membership. Credit card information is managed by the payment processing company's system, and no leaks have been confirmed.

SoftBank has successfully conducted a demonstration experiment in which a large unmanned aircraft is equipped with a communications pod for disaster response, and it sends out radio waves from 3,000 meters above the ground to create a communications area over 5 kilometers in diameter. This was the first attempt in Japan to use GA-ASI's MQ-9B, and confirmed communication quality of up to 20 Mbps downlink, marking a step toward social implementation as emergency communication infrastructure during disasters.

With the enforcement of the Act on Strengthening Cyber Response Capabilities, the government has begun operating active cyber defense. When the police or Self-Defense Forces detect signs of an attack, they infiltrate the other party's server and render it harmless by erasing the malicious program. Public-private collaboration will also be strengthened, and the use of communications information will come into effect from fall 2027.

This year's recipient of the Right Livelihood Award, known as "another Nobel Prize," has been announced, with Timnit Gebr, a leading expert on AI ethics, selected. He was praised for criticizing bias in development by large tech companies and promoting inclusive AI research.