JupiteX Get the app
Defence & Security26 Oct 2026 · about 6 min

Japan PM orders emergency measures amid wave of corporate cyberattacks

The brief

Japan has recently faced a wave of hacking incidents affecting companies across the country. Dozens of businesses reported unauthorized access to their systems and possible leaks of client data. These incidents created concern about what might happen to the exposed information. A Chinese AI cybersecurity tool called Artex was reportedly used in several of the recent hacks, according to GMO Internet Group’s information-security arm. The tool was designed to help organizations test their defenses and find weak points, but its reported use in attacks highlights how security technology can be turned against companies. GMO Internet Group was itself attacked. Its founder and chief executive, Masatoshi Kumagai, said a hacker demanded US$50 million in connection with the hack. The incidents have pushed Japan’s government to prepare emergency countermeasures and join international efforts to identify the attackers.

01

What cyberattacks and unauthorized system accesses have recently affected Japanese companies?

Japan has recently faced a wave of hacking incidents affecting companies across the country. Dozens of businesses reported unauthorized access to their systems and possible leaks of client data. These incidents created concern about what might happen to the exposed information.

A Chinese AI cybersecurity tool called Artex was reportedly used in several of the recent hacks, according to GMO Internet Group’s information-security arm. The tool was designed to help organizations test their defenses and find weak points, but its reported use in attacks highlights how security technology can be turned against companies.

GMO Internet Group was itself attacked. Its founder and chief executive, Masatoshi Kumagai, said a hacker demanded US$50 million in connection with the hack. The incidents have pushed Japan’s government to prepare emergency countermeasures and join international efforts to identify the attackers.

02

What is cybersecurity, and what does it protect?

Cybersecurity means protecting digital systems and the information stored or transmitted through them. It covers computers, networks, software, online services, and databases. Its purpose is to prevent unauthorized access, damage, disruption, theft, and misuse. In this article, cybersecurity matters because Japanese companies reported system intrusions and possible client-data leaks.

A company may use cybersecurity measures to detect suspicious activity, block unauthorized users, test its systems, and respond to an attack. Artex was designed for AI-powered security testing. It searches for potential weak points so organizations can strengthen their defenses before attackers exploit them.

The same incidents show why protection is urgent. Dozens of Japanese businesses reported unauthorized access, while GMO Internet Group faced a ransom demand after a hack. Japan’s prime minister called the situation serious and ordered an emergency package of countermeasures.

03

How many businesses have reported attacks, and how large was the ransom demanded from GMO Internet Group?

The article does not give an exact number of affected businesses. It says dozens of Japanese companies reported unauthorized access to their systems and potential leaks of client data. That wording indicates a broad incident wave rather than a single isolated breach.

The largest stated financial demand involved GMO Internet Group. Its founder and chief executive, Masatoshi Kumagai, said a hacker demanded US$50 million, equivalent to RM204 million, by the previous Wednesday in connection with a hack. GMO Internet Group’s information-security arm had also linked several recent hacks to the Artex tool.

The number of reported businesses and the ransom amount show both the breadth and seriousness of the situation. Japan’s government described growing anxiety about leaked information and said it would compile an emergency package of measures by the following week.

04

What could happen if attackers misuse the leaked client information?

If attackers misuse leaked client information, affected people and organizations could face serious harm. The article specifically warns about growing anxiety over the misuse of leaked information. It does not identify particular forms of misuse, so the confirmed consequence is heightened concern about what could happen to the exposed data.

The risk follows unauthorized access to company systems. Once information may have leaked, businesses cannot be certain that it remains under their control. In the reported incidents, dozens of Japanese companies faced possible client-data leaks, while GMO Internet Group dealt with a separate hack and ransom demand.

This concern is one reason Prime Minister Sanae Takaichi called the situation serious. Japan plans to strengthen countermeasures through an emergency policy package. The government also said it would join global efforts to identify the attackers, linking data-protection concerns with the wider investigation.

05

Why is Japan's prime minister ordering an emergency cybersecurity policy package, and what might the government need to coordinate?

Prime Minister Sanae Takaichi ordered an emergency cybersecurity policy package because Japan has faced a sudden wave of hacking incidents. Dozens of businesses reported unauthorized access and potential client-data leaks. She said the situation was serious, with growing anxiety about misuse of the leaked information, and called for faster countermeasures.

The government said it would compile an emergency package by the following week. The article does not list its specific measures. It does show that cabinet ministers were brought together for an emergency meeting, indicating that the response involves national government coordination rather than one company acting alone.

Japan also said it would join global efforts to identify the attackers. Therefore, coordination may need to connect the cabinet response with affected businesses and international efforts. The article confirms those priorities, but it does not name the agencies, countries, or detailed systems that would carry them out.

06

How can international cooperation help identify attackers when cyberattacks cross national borders?

Cyberattacks can cross national borders because attackers, digital infrastructure, and targeted companies may be in different countries. International cooperation helps investigators compare evidence and coordinate their efforts. It can also reduce gaps created when one country cannot examine every part of an attack alone. The article confirms that Japan will join global efforts to identify the attackers.

In this case, cooperation could involve sharing information about the reported hacks, unauthorized system access, and tools allegedly used in attacks. GMO Internet Group’s security arm said Artex was used in several recent hacks of Japanese companies. Comparing technical findings could help investigators connect incidents and assess who was responsible.

The article does not identify participating countries, agencies, or specific investigative methods. It does show that Japan considers a joint international effort necessary. As the attacks continue to attract attention, cooperation could support a clearer understanding of the attackers and their methods.

07

How can artificial intelligence tools find previously unknown weaknesses in computer systems, and why can the same capability help both defenders and attackers?

AI tools can examine computer systems quickly and search for unusual paths into them. By testing many possibilities, they may reveal weaknesses that were not previously known or recognized. Defenders can then use those findings to strengthen systems. The article says AI’s ability to find previously unknown hacking methods is now in the global spotlight.

Artex illustrates this dual use. Its developer designed it to help organizations improve cyber defenses through AI-powered security testing. The tool searches for potential weak points. However, GMO Internet Group’s information-security arm said Artex was used in several recent hacks of Japanese companies, showing how a defensive capability can also support attacks.

This creates a difficult security problem. AI models are becoming more advanced as leading labs release new systems. The article does not explain Artex’s technical process or identify the attackers. It does show why organizations and governments are focusing on stronger defenses and coordinated responses.

This brief was written by AI from the original reporting and checked by other models. Names, figures and quotes come from the source; read it for full context.

Read more in the JupiteX app

Pulse is free. New stories every 4 hours, each one broken into the questions that explain it.

Or read more news on the web