Japan declares cyber ‘emergency’ after millions affected in hacks

Japan has declared a cyber "emergency" following a series of high-profile data breaches affecting millions of citizens. The country's Ministry of Finance warned banks to implement robust verification mechanisms, such as mandating chip-enabled ID cards for opening new accounts. Finance Minister Satsuki Katayama announced that numerous cyber incidents have resulted in the leaking of customer information, including identity verification documents.

Public and private institutions across Japan have been targeted, including rail operators, car manufacturers, karaoke chains, and law enforcement agencies. Notable victims include Times Car Rental, which experienced a data breach affecting 6.6 million accounts, and Lawson, a convenience store chain that reported unauthorized access to 2.15 million customer records, potentially exposing names, emails, and credit card details.

In the first half of the year, Japan recorded 123 ransomware attacks. The National Cyber Security Office and the Ministry of Internal Affairs and Communications issued warnings to businesses, urging them to bolster their security measures, including those of their contractors. In an emergency meeting, the head of the National Cybersecurity Strategy Headquarters, former Digital Minister Masaaki Taira, declared the situation a "state of emergency in cyberspace."

Cybersecurity experts attribute Japan's vulnerability to its ageing population and slower digitization of businesses. Globally, European governments, including Spain, Norway, Germany, and the European Commission, have also faced cyberattacks. In recent weeks, Italy's Ministry of Foreign Affairs reported a cyberattack, while Danish authorities warned of an "extremely serious" incident involving the theft of personal information belonging to around 8.8 million individuals.