Japan Approves ¥10 Billion Emergency Cybersecurity Package After Breach Wave

Prime Minister Sanae Takaichi announced on November 6 that Japan will spend about ¥10 billion (about $63 million) from fiscal 2026 reserve funds on an emergency cybersecurity package, responding to a wave of cyberattacks and large-scale personal data leaks affecting companies and government bodies.

Where the money goes: police equipment takes the largest share

According to Jiji Press, as reported by Nippon.com, the funding is split three ways: about ¥4.1 billion for police cyber-investigation equipment and training, about ¥3.8 billion to strengthen the Digital Agency's systems, and about ¥2 billion for AI-assisted vulnerability checks of important government systems. The Prime Minister's Office listed four priorities: improving basic security with AI, consolidating intelligence and investigative capabilities, responding strategically to attacks, and strengthening support for victims.

METI expert team and public-private rescue team due by year-end

The Ministry of Economy, Trade and Industry plans to set up a specialist team by the end of November that will use AI to simulate attacks and find system weaknesses, working with technology companies and AI developers in friendly countries. The government will also create a public-private cyber rescue team to act as first responder when organizations are attacked. Operators of critical infrastructure will in future have to report attacks to the National Cybersecurity Office in the Cabinet Secretariat within hours, and no later than the same day.

The trigger: a string of leaks after the GMO ransomware attack

The package follows months of breaches: a ransomware attack on GMO Internet Group prompted Takaichi to order the package the previous week, and the Associated Press reported that dozens of companies and public bodies have suffered unauthorized access and customer data leaks in recent months. The government stressed that the ¥10 billion is initial emergency funding, and Takaichi has instructed ministers to secure further resources.

Domestic communications monitoring may be widened

Takaichi also instructed ministers at the November 6 meeting to examine legal amendments that would extend the country's active cyber defense law to allow monitoring of communications taking place entirely within Japan, to strengthen the government's ability to gather information about attacks. The proposal remains under study, with no timetable for submitting it to parliament.

(Sources: Associated Press; Jiji Press via Nippon.com; Prime Minister's Office of Japan; Asia Daily.)