Image: cdn.sanity.io · rights & removal

Cyberattacks Are Skyrocketing in Japan as Researchers Trace AI

Reporting by Socket Security BlogRead the original at socket.dev

Executive Summary

Japan is experiencing a significant surge in cyberattacks, with 233 security incidents publicly disclosed in October alone, which is approximately 2.4 times the previous monthly record according to Trend Micro data. The volume of exposed information is rapidly increasing; an analysis estimates that about 185 million personal information records were exposed or potentially exposed during October disclosures, nearly four times the total reported for all of 2025. Major entities, including retailers, technology companies, financial services providers, and government agencies, have been implicated in these breaches. Specific incidents involved entities like Nitori disclosing access to customer information and email provider Arara confirming intrusions affecting numerous email addresses, which subsequently impacted other organizations through supply chain exposure. Researchers found evidence that artificial intelligence tools are being used by attackers to scan for vulnerabilities and exploit weaknesses in applications and systems, extending beyond traditional targets to specialized services.

Facts Only

* 233 security incidents were publicly disclosed in October alone.
* Approximately 185 million personal information records were exposed or potentially exposed in October incidents, nearly four times the total reported for all of 2025.
* 30 incidents involving at least one million records were disclosed in October.
* Nitori disclosed unauthorized access to systems that may have exposed up to 37.62 million customer information records on November 9.
* Arara confirmed an intrusion affecting more than 81 million email addresses and potentially hundreds of corporate customers.
* Attackers used Arara's service to send fraudulent messages impersonating credit card companies between October 28 and October 30.
* SEGA disclosed approximately 2.2 million newsletter email addresses were exposed through Arara on November 9.
* Ymir Link disclosed an intrusion into its Cuenote FC service, extracting approximately 47.9 million email distribution records from 49 systems.
* Researchers confirmed attackers used AI to scan for known vulnerabilities and conduct attacks through APIs in October 2021.
* Attackers analyzed Android application packages using tools like Blutter and jadx to identify API endpoints and authentication mechanisms.
* Macnica documented web application breaches involving unauthorized access to web systems and potential data theft through October 2026, compared with 84 in 2025.

Full Take

The pattern of escalating incidents suggests a shift from large-scale public targets to exploiting systemic weaknesses across the digital supply chain, illustrated by the widespread impact following the Arara breach which demonstrated how a single vendor compromise propagates risk across numerous unrelated entities. The focus on obscure targets, such as regional associations and niche booking systems, alongside the confirmed use of AI in vulnerability discovery, points to an evolution where attackers are leveraging automated analysis to find less obvious, application-specific flaws rather than relying solely on widely known vulnerabilities. This acceleration is met by a governmental response emphasizing earlier vulnerability warnings, suggesting that the velocity of exploitation is outpacing traditional disclosure cycles. The tension lies between the speed at which AI can be used for offensive reconnaissance and the necessary time required for organizations to implement effective, coordinated patching across complex, interconnected systems. What costs are being borne by smaller entities or those dependent on third-party service providers when this pace forces reactive measures instead of proactive security design?

From the original · Socket Security Blog

Assisted Intrusions Japan faces a record surge in cyberattacks as researchers uncover AI-assisted intrusions, widespread data breaches, and growing pressure to patch vulnerabilities. - Sarah Gooding Japan is facing an extraordinary surge in cyberattacks, with a record 233 security incidents publicly disclosed in October alone.

Read the full story at socket.dev

Sentinel unavailable

The automated check of the source article's wording did not complete, so no result is shown.

This looks only at the wording of the original source article, not at this page's AI-written sections. A small local AI model made this estimate. It has not been checked against known human and machine texts, so treat it as provisional. It cannot show who wrote an article.