Japan
East Asia · capital Tokyo · cyber picture, physical security and relations with the EU on one page
Who targets Japan
All 29 actors →
China (16) · 
Russia (5) · 
North Korea (3) · 
South Korea (2)| Actor | Suspected sponsor | In its news · 30d | Techniques |
|---|---|---|---|
| TraderTraitor named in the news only | North Korea |
1 | — |
| Storm-0940 named in the news only | China |
1 | — |
| UTA0178 named in the news only | China |
1 | — |
| Lazarus Group | North Korea |
— | 30 |
| APT29 | Russia |
— | 66 |
| APT17 | China |
— | 16 |
| APT28 | Russia |
— | 93 |
| WIZARD SPIDER | Russia |
— | 64 |
| APT27 | China |
— | 57 |
| ENERGETIC BEAR | Russia |
— | 56 |
| APT10 | China |
— | 46 |
| Earth Lusca | China |
— | 44 |
Cyber news 30 days
Every cyber article that mentions it →- Never be afraid to ask questions
- Japan's Muji suffers personal data leak! Over a million member records leaked, President apologizes: Full compensation for losses ZH
- Exodus in Karen State’s Shwe Kokko as Chinese-run cyber scams relocate to Payathonzu
- Seven scam syndicates targeting victims overseas busted in Sarawak, 28 foreigners among 42 held
- 7 online scam syndicates busted, 42 held by Sarawak police
- Ryohin Keikaku, operator of Muji, apologizes at press conference following unauthorized access JA
- Japan in cyber threat emergency, one-third of companies become victims ID
- Japan Pushes Emergency Funding for Cybersecurity as AI-Assisted Breaches Rise
- Cyberattacks hit a third of Japan firms or their service providers this year: Reuters poll
- In response to increasing AI-enabled cyber attacks, Japan promotes emergency cybersecurity funding JA
Exploited vulnerabilities in its news 90 days
- CVE-2026-109618
- CVE-2026-109619
- CVE-2026-21589
- CVE-2026-0257 Ransomware
- CVE-2026-63077 Ransomware
- CVE-2025-8088 Ransomware
- CVE-2026-104935
- CVE-2026-111497
Incidents
Register →- Moderate Japan Pushes Emergency Funding for Cybersecurity as AI-Assisted Breaches Rise Detected
- Moderate Cyberattacks hit a third of Japan firms or their service providers this year: Reuters poll Detected
- Moderate Unauthorized access to 'RAKSUL'; risk of leakage of printing data and other information Detected
- Elevated Unauthorized access to Nitori; possibility of up to 37.62 million pieces of personal information leaked Detected
- Elevated SEGA newsletter data breach exposes 2.2 million email addresses Detected
- Elevated Iris Ohyama data cloud breach exposes info of 7.7 million customers Detected
- Elevated Double Trouble: Japan Data Breaches Expose 260 Million Personal Info Records Detected
- Moderate Possibility of unauthorized access to Docomo; online services suspended Detected
National CERT advisories
All →- SoftBank Air Terminal 6 vulnerable to OS command injection
- Sleipnir Mobile for iPhone/ iPad vulnerable to improper certificate validation
- Movable Type vulnerable to code injection
- Security Alert: Microsoft Releases November 2026 Security Updates
- Security Alert: Microsoft Releases October 2026 Security Updates
Cyber threat landscape as described in the country report of Nov 10 Machine-generated
Japan is currently facing a significant and evolving cyber threat landscape, characterized by a wave of data breaches and the emergence of AI-generated attacks. Prime Minister Sanae Takaichi announced on November 6, 2026, an emergency cybersecurity package in response to dozens of companies and government agencies being hit by unauthorized access to their systems and leaks of client data. These incidents have caused widespread public uneasiness and impacted daily lives and corporate activities. One high-profile incident mentioned is a ransomware attack targeting GMO Internet Group, which affected thousands of servers and customer trading accounts.
In response, the Japanese government has allocated ¥10 billion ($63 million) to build a resilient society with one of the world's highest levels of cybersecurity. Key measures include the establishment of a "top gun" team of cybersecurity experts by the Ministry of Economy, Trade and Industry (METI) by the end of November, which will use AI to counter hackers and detect network weaknesses. A public-private "cyber rescue team" will also provide initial responses to affected companies, and a separate unit will help vulnerable businesses strengthen their defenses. Furthermore, Japan is enhancing its "active cyber defense" capabilities, legalized in October, allowing authorities to proactively access servers used by hackers to preemptively address threats. Japan also plans to seek early access to information about undisclosed software vulnerabilities from U.S. AI developers and other foreign technology companies to improve preparedness.
Background: Threat actors known to target Japan include Lazarus Group (North Korea-linked), APT28 (Russia-linked), APT29 (Russia-linked), WIZARD SPIDER (Russia-linked), APT27 (China-linked), ENERGETIC BEAR (Russia-linked), APT10 (China-linked), and Earth Lusca (China-linked). TraderTraitor was named in news in the last 30 days, though no specific activity against Japan was reported in the current period.
Hotspots from the country report of Nov 10
Machine-generated- Elevated Okinawa — Site of accelerated defense buildup, U.S. military presence, and recent incidents including a Marine death during training and an extended curfew.
- High Yonaguni Island — Key location for defense buildup and joint military exercises, strategically close to Taiwan, with deployment of advanced missile systems.
- High Taiwan Strait — A critical flashpoint driving Japan's defense posture and military modernization efforts in its southwestern islands.
- Elevated South China Sea — Area of deepening Japan-Philippines defense cooperation to enhance maritime monitoring against common threats, particularly from China.
- Moderate Gulf of Aden — Location of Japan's extended anti-piracy mission, underscoring its commitment to international maritime security.
- Elevated Tokyo — Center of government policy decisions, including the announcement of major defense spending hikes and emergency cybersecurity measures in response to widespread attacks.
Threat level last reports
Machine-generatedLatest country report
Read the full report →Relations with the EU
Factsheet →Mentioned 4 times in latest briefing. Last updated: 2026-08-22
- 7 EU cooperation projects · 7 active
- No EU Digital & ICT project recorded here
- 1 trade or cooperation agreement on record
EU relations and implications country report of Nov 10
Machine-generatedDuring the period of November 03 to November 10, 2026, there were no specific new developments reported regarding Japan's direct relations with the European Union in terms of trade, digital, or security cooperation. The EU relationship outlook was assessed as "Stable" in August 2026, and existing cooperation projects include Research & Innovation (3), Trade & Investment (1), Peace & Security (1), Education & Skills (1), and Development Cooperation (1). While the Keen Sword 27 military exercises in October 2026 saw participation from several European nations (France, Germany, Netherlands), this occurred outside the reporting period, though it indicates ongoing security engagement. Prime Minister Sanae Takaichi also held a joint news conference with German Chancellor Friedrich Merz in Tokyo on October 28, 2026, just prior to this reporting period.
The significant security and cyber developments in Japan, such as the increased defense spending, accelerated military buildup, and the emergency cybersecurity package, have indirect implications for EU interests. A more secure and cyber-resilient Japan contributes to overall stability in the Indo-Pacific, a region of growing strategic importance for the EU. Enhanced cybersecurity in Japan, particularly through its new active cyber defense capabilities and cooperation with friendly nations on vulnerability information, could indirectly benefit EU interests by strengthening global cyber defenses and information sharing. However, without direct engagement or specific joint initiatives reported during this period, the immediate impact on EU-funded cooperation projects remains to be seen.
| Agreement | Type | Budget | Organisation | Period | Status | |
|---|---|---|---|---|---|---|
| EU-Japan Economic Partnership Agreement (EPA) | Free Trade Agreement | — | Asia-Pacific | 2019 | ACTIVE | Source ↗ |
Previous reports
Machine-generated- Japan Security Report — November 09, 2026
- Japan Security Report — November 08, 2026
- Japan Security Report — November 01, 2026
- Japan Security Report — October 30, 2026
- Japan Security Report — October 25, 2026
- Japan Security Report — October 22, 2026
- Japan Security Report — October 20, 2026
- Japan Security Report — October 14, 2026
- Japan Security Report — October 11, 2026
- Japan Security Report — September 28, 2026