Japan Implements Cyberdefense Law After Massive Ransomware Wave

The Government of Japan implemented a new cyberdefense law in October that empowers national police and the military to monitor or disable foreign servers to protect national security. This legislative action follows a wave of ransomware attacks over several weeks that targeted local governments, a public university, a car-sharing service, and nearly 500 companies via a SoftBank-owned cloud service.

The attacks resulted in the suspension of essential services and the leak of more than one million personal documents. Masaaki Taira, leader of a cybersecurity committee within the Liberal Democratic Party, described the situation as "a state of emergency in cyberspace." Experts indicate that artificial intelligence likely facilitated the breach by automating vulnerability scans and enhancing the quality of Japanese-language phishing campaigns.

Minister of Digital Transformation Toshiharu Furukawa issued updated data handling guidelines for personnel information in response to the crisis. While Japanese police previously linked the Russian group Qilin to 53 attacks over the past year, it remains unclear if that group is responsible for the current wave of disruptions.