.png "Global Insight")
Japan has declared a cybersecurity emergency. Prime Minister Sanae Takaichi announced a ¥10 billion — about $63 million — emergency package on Friday after a wave of massive data breaches hit major companies and government agencies, exposing customer data and disrupting daily life. The plan leans on artificial intelligence, specialist response teams and a new public-private "cyber rescue" squad — and Takaichi has told her ministers to find more money, because the first ¥10 billion is only the start.
The wave that forced the package
According to the Associated Press, dozens of companies and public bodies have suffered unauthorised access to their systems and leaks of client data in recent months, prompting unease across Japan. At least 81 incidents have been reported since July — about a third of all attacks in the past three years, according to Insurance Journal. The most serious disclosure came from NTT Docomo, which said customer data tied to as many as 294,839 mobile lines had been exposed, with some records containing identity-document numbers and bank account details.
Japanese media have also reported that a Chinese artificial intelligence cybersecurity tool called Artex was used in several of the recent hacks, according to an information security arm of IT firm GMO Internet Group. The government has not publicly attributed the wave to any single actor, and the package is framed as a resilience measure rather than a retaliation.
What the ¥10 billion buys
About ¥2 billion will fund AI-assisted checks for vulnerabilities in government information systems, ¥4.1 billion goes to equipment and training to support police investigations into cyberattacks, and ¥3.8 billion will strengthen the Digital Agency's system security, according to Jiji Press reporting. The Ministry of Economy, Trade and Industry will set up a specialist "top gun" team of cybersecurity experts by the end of November, using AI to identify weaknesses in systems before attackers do.
The package also creates a public-private cyber rescue team to act as a first responder when organisations are attacked, with a secretariat to coordinate deployments where needs are acute, and faster discussions on blocking access to websites that display stolen personal information. For incidents that threaten national security, the Defence Ministry, the National Police Agency and the National Cybersecurity Office will deploy joint teams. Core infrastructure operators will be expected to report attacks to the National Cybersecurity Office within hours — at the latest, the same day they are detected.
The bigger shift: striking back
The most consequential part of the package may be what it enables rather than what it funds. The government will expand its use of "active cyber defense" — the power to access servers used by hackers as a pre-emptive measure, which was legalised only in October. Takaichi told Friday's ministerial meeting that a rapid response to potential attacks is essential in the era of AI-generated attacks, and she has directed ministers to secure further resources beyond the initial ¥10 billion.
¥10 billion is small against a wave of more than 81 incidents, and the package itself acknowledges that: it is framed as the start of urgent work, not the whole programme. But the direction is unmistakable. Japan, long criticised for treating cybersecurity as an afterthought, is now building the machinery to detect attacks faster, help victims sooner and — for the first time — reach into attackers' own infrastructure before the next breach lands.
Sources: La Nación (Associated Press) and Gulf News.