Japan logged 233 security incidents in October, far above prior peak
Original title: Japan Hit by Record Cyberattack Surge as Hackers Use AI to Exploit Security Vulnerabilities
MM Research Institute estimates those October disclosures exposed or potentially exposed 185 million personal records, nearly four times all of 2025.
Japan recorded 233 publicly disclosed security incidents in October 2026, about 2.4 times its previous monthly peak, according to figures cited from MM Research Institute. Named cases include Arara, which said attackers obtained about 81.3 million email addresses and sent fraudulent messages, SEGA's newsletter exposure, and Ymir Link's Cuenote FC records. JPCERT/CC reported attackers using AI to scan weaknesses and test API flaws, including server-side request forgery, but researchers have not tied the surge mainly to AI. Japan announced a 10 billion yen emergency cybersecurity package.
Unconfirmed: Exposure totals mix suspected and confirmed cases, and researchers have not shown how much AI drove the surge.
- Thirty October incidents each involved at least one million records.
- Arara's exposure could affect 380 corporate customers, depending on the customer.
- Fraudulent credit-card messages totaled up to 7.13 million between October 28 and 30.
- Ymir Link reported about 47.9 million Cuenote FC records across 49 systems.
- Macnica counted 288 web-system intrusions with potential theft through October, versus 84 in 2025.
Impact: exposure of email addresses and other personal records
- 1.Inventory software components and replace unsupported applications.
- 2.Set remediation priorities and deadlines.
- 3.Assess contractor-operated systems and APIs.
- Products
- Cuenote FC
- Organizations
- MM Research InstituteJPCERT/CCSocketMacnicaTrendAI
- Countries
- Japan
From the original article
2 min read at gbhackers.com
Japan recorded 233 publicly disclosed security incidents in October 2026, approximately 2. 4 times its previous monthly peak, as researchers uncovered AI-assisted exploitation targeting application backends. MM Research Institute estimated that incidents disclosed during October exposed or potentially exposed 185 million personal information records, nearly four times the total reported throughout 2025.
By Eswar · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.