Japan has declared a “state of emergency in cyberspace” after a series of cyberattacks targeted major companies, hospitals, and government facilities, exposing large amounts of sensitive information.
More than 20 major Japanese companies have reportedly been hit by cyberattacks in recent weeks, according to the Financial Times. The affected organizations include Times Car, a car rental service, and convenience store operator Lawson.
The breaches have raised concerns about the security of personal information, with potentially tens of millions of records exposed across affected organizations.
Japan Tightens Bank Identification Rules
Japanese financial institutions have been instructed not to accept driver’s licenses as the sole form of identification when opening new bank accounts.
The move follows a cyberattack on Times Car that exposed images of customers’ driver’s licenses. Reports indicate that some of these images have appeared on dark web marketplaces, with individual records reportedly offered for as little as 25 yen, or around 15 cents.
Under the revised approach, customers will need to provide identification with an embedded electronic chip, such as a passport or Japan’s My Number national identity card.
The change is intended to reduce the risk of criminals using stolen identification to open accounts or commit fraud.
Government Declares Cyber Emergency
Masaaki Taira, head of Japan’s National Cybersecurity Strategy Headquarters, described the situation as a “state of emergency in cyberspace” as the government responds to the growing number of attacks.
Japan’s cybersecurity minister, Toshiharu Furukawa, has also characterized the situation and the need for a response as extremely serious.
The attacks have affected both private companies and critical public services, including hospitals and government facilities, increasing concerns about the potential consequences of weak cybersecurity protections.
Artificial intelligence is also emerging as a concern in the cybersecurity landscape, as advanced tools could help attackers automate or scale certain operations. However, the available information does not establish that AI was responsible for every attack in Japan.
The latest incidents have renewed calls for stronger data protection systems as cybercriminals continue to target organizations holding large amounts of personal and confidential information.
