Japan urges companies to treat cybersecurity as core management issue
Japan's government has called on companies to strengthen the security of their information technology systems and overhaul their response frameworks following a string of artificial intelligence-driven cyberattacks and large-scale data breaches. The government warned that repeated unauthorized access incidents and personal data leaks of recent months go beyond simple security failures and represent a management risk that can halt business operations.
Saturation attacks powered by AI driving breach surge
Masaaki Taira who heads AI policy for the ruling Liberal Democratic Party said recent cyberattacks have taken on the character of so-called saturation attacks. In these incidents AI is used to automatically repeat assaults on a massive scale. Taira said technical countermeasures are needed that can automatically detect anomalies and block the spread of damage after an IT system is breached but before sensitive information is actually leaked outside.
Major companies hit: Times Car Daiwa Securities FamilyMart
Japan has seen a series of cyberattacks and data breaches targeting major companies in recent months. At Times Car the country's largest car-sharing operator about 6.6 million pieces of user personal data were exposed to outside parties in a cyberattack. Daiwa Securities also reported data leaks. FamilyMart a convenience store chain joined the list of affected organizations. Japanese security authorities are investigating who was behind the large-scale unauthorized access cases the specific methods used and any links between the incidents.
Government position: cybersecurity as core management issue
The government said companies should treat cybersecurity as a core management issue expand related investment and put in place specialist staff and response units prepared for incidents. When damage from a cyberattack occurs companies should quickly provide relevant information to the National Cyber Office or specialized security agencies to prevent further harm and improve response capabilities. The warning was issued on the ninth of October two thousand twenty-six and cited by Kyodo News.
Party meeting and public-private response systems
The ruling Liberal Democratic Party also held a meeting of its national cybersecurity strategy headquarters the same day and urged the government to reinforce joint public-private response systems. The party emphasized that coordinated action between government and industry is essential to keep pace with AI-driven threats that can scale automatically.
What this means for security teams
Organizations should assume that AI-powered automation can lower the cost of repetitive attacks. Defenses need to detect anomalies in real time and contain breaches before data exits the network. Investment in specialist staff and dedicated response units is no longer optional if operations are to remain resilient. Quick reporting to the National Cyber Office or specialized agencies can limit secondary harm and improve collective response capability.