Stories
Japan Warns of Cyber Crisis as Major Data Breaches Hit Banks and Public Services
- •Japan is facing an escalating cyber security crisis after more than 20 major companies and public institutions disclosed severe data breaches.
- •Financial regulators have urged banks to stop using driving licences for identity verification and switch to chip-equipped documents like passports and MyNumber cards.
- •Major entities including JR East, Lawson, and cloud provider IDC Frontier have been targeted, exposing millions of customer records.
- •Japanese officials, including ruling party members, have declared a state of emergency in cyberspace to address the widespread vulnerabilities.
- •Experts warn that the growing use of artificial intelligence by cyber criminals could further increase threats to businesses and public infrastructure.
Key Questions Answered
Japan's Financial Services Agency is urging lenders to abandon driving licences as a primary verification method due to rising cyber breaches, such as an incident involving car rental operator Times Car where licence images may have been exposed. Regulators recommend accelerating the adoption of chip-equipped documents like passports and MyNumber cards.
More than 20 major companies and public institutions have disclosed breaches, including East Japan Railway which reported about 1.67 million compromised customer email addresses. Other reported victims include convenience store operator Lawson, hospitals, government facilities, and local authorities affected by a ransomware attack on SoftBank's IDC Frontier.
Artificial intelligence allows cyber criminals to automate preparatory work such as identifying potential targets, which reduces the time, cost, and technical knowledge required for attacks. Experts warn this enables smaller criminal groups to assess more victims and widens the pool of vulnerable organizations.
