Japan Hit by Record Cyberattack Surge as Hackers Use AI to Exploit Security flaws

What happened

Japan recorded 233 publicly disclosed security incidents in October 2026, approximately 2.4 times its previous monthly peak, as researchers uncovered AI-assisted exploitation targeting application backends. MM Research Institute estimated that incidents disclosed during October exposed or potentially exposed 185 million personal information records, nearly four times the total reported throughout 2025.

These figures represent records rather than unique individuals and combine suspected exposure with confirmed compromises.

Japan Hit by Record Cyberattack Email distribution provider Arara confirmed attackers obtained approximately 81.3 million email addresses, potentially affecting 380 corporate customers. Investigators identified software exploitation, stolen session information, and abuse of legitimate CSV export functionality.

Thirty incidents involved at least one million records each.

Depending on the customer, exposed information included names, birth dates, telephone numbers, addresses, and membership details. Attackers also abused its delivery infrastructure to distribute up to 7.13 million fraudulent messages impersonating credit card companies between October 28 and October 30.

A separate intrusion into Ymir Link’s Cuenote FC platform exposed approximately 47.9 million email distribution records across 49 systems, according to its November 11 update.