Over the past few weeks, hackers have tampered with servers, knocked local-government websites offline and accessed large volumes of consumer data. The disruption has reached nearly every sector, prompting Masaaki Taira, a former digital minister who leads the ruling party’s cybersecurity committee, to declare “a state of emergency in cyberspace.”¹

The scale of the damage quickly became concrete. A public university suspended classes for a week after an attack on its servers. A car-sharing company reported the leak of more than one million personal files, including driver’s-license photographs and home addresses. A ransomware strike on a SoftBank-owned cloud operator then affected almost 500 companies and local governments, including a rail operator and police headquarters.¹

Officials say the immediate task is containment. Digital Transformation Minister Toshiharu Furukawa said attacks were reaching “all industries,” and the government issued an alert, updated rules for handling personnel data and called for deletion of unneeded personal information and two-factor authentication. Investigators are still examining whether AI played a role; Furukawa acknowledged that establishing the details has been slow.¹

AI is nevertheless central to the emerging argument over why the assault has become so damaging. Experts say automation can scan for vulnerabilities around the clock, while AI-generated Japanese translation can make phishing messages harder to spot. What once made foreign scams conspicuous—awkward Japanese—has become a weaker line of defense.¹

But another camp warns against mistaking the tool for the cause. Koichiro Fujii of Makaira said the campaign did not appear to be a coordinated, state-backed geopolitical operation. Rather, he argued, hackers are targeting Japan because “vulnerabilities in its infrastructure have not been patched,” offering the best return on effort.¹ That view is reinforced by the recent surge: TrendAI recorded 600 reported attacks in the first nine months of 2026, already above 2025’s full-year total.¹

Japan’s new cyber-defense rules, which took effect in early October, allow police and the military to monitor or disable overseas servers tied to threats and require companies to report breaches. Yet specialists say lasting resilience will demand investment, modernized systems and international cooperation—not simply a hunt for AI’s fingerprints.¹