Japan Hit by Surge of Corporate Data Breaches as Ransomware and AI Tools Raise the Stakes

Japan is facing a dense wave of breach disclosures. Since late September, at least 20 major Japanese companies have reported breaches, including Times Car, Lawson, Yakiniku King, Sourcenext and Burger King Japan. A ransomware attack on SoftBank's IDC Frontier cloud took 495 customer organisations offline. Between September 25 and October 8 alone, at least 36 Japanese organisations issued a first breach notice, and further notices arrived after mid-October from Yamato Transport, Nikkei and email delivery provider Ymirlink.

The wave built over about three weeks. Times Car's disclosure on September 25 was followed by new notices almost daily, and the IDC Frontier attack on October 7 turned a string of company incidents into a national story. On October 19, a Japanese security firm tied part of the wave to a Chinese-developed AI penetration-testing tool.

SOCRadar's Dark Web News data shows the same spike. Items tied to Japan reached 134 in the first 15 days of October, already more than all of September, at 8.9 a day against 4.3 in September. Monthly volume had plateaued at 120 to 152 items between June and September, and October is on pace to pass July's 152, the busiest month this year so far.