Skip to main content
MetaWorld Media
TechAsia

Japan Reports 260 Million Personal Data Compromised Amid Cyber Attack Surge

Japan's Personal Information Protection Commission says 260 million records were breached from April to mid‑October, with 2,094 incidents reported.

By MetaWorld MediaSource: english.news.cn1 min read

In brief

Japan's Personal Information Protection Commission announced that personal data belonging to roughly 260 million individuals was compromised between April and mid‑October, amid a surge in cyberattacks. The figure, a total of 2,094 incidents, includes many large‑scale leaks affecting more than 10 million people each, prompting urgent government action.

TOKYO, Oct. 31 – Japan’s Personal Information Protection Commission released data indicating that personal information belonging to approximately 260 million people was compromised from the start of the fiscal year in April to mid‑October, according to a Xinhua report.

The figure represents roughly twice Japan’s population and includes many cases that overlap, as some people were impacted by multiple incidents. The report was compiled from cases reported by businesses handling personal information, excluding those in the financial and telecommunications sectors, suggesting the actual scale could be even larger.

During the six‑month period, a total of 2,094 incidents of unauthorized access to personal information were reported, with six of those incidents each involving the leak of data on more than 10 million individuals. The number of breach incidents rose markedly, especially in October, when 830 incidents were reported in the first half of the month compared with 303 for the whole of September.

The commission’s data also provides context from the previous fiscal year. In 2025, a total of 1,256 incidents were reported for the entire year, as noted by Kyodo News, indicating a persistent trend of data breaches over time.

Earlier in the week, several companies and institutions confirmed that their data may have been compromised after unauthorized access to their websites or other systems. The companies cited included Sony Life Insurance Co., discount retailer Don Quijote, video game publisher Bandai Namco Entertainment Inc., and Kyushu University and its affiliated hospital. On Friday, additional firms announced possible leaks, including Muji brand operator Ryohin Keikaku Co., restaurant chain operator Matsuya Foods Holdings Co., and All Nippon Airways Co.

The number of large‑scale leaks is increasing rapidly, and the government is taking the situation very seriously,

Chief Cabinet Secretary Minoru Kihara said at a press conference Friday, adding that the government will compile a package of emergency countermeasures quickly.

Topics

More on this story