Japan Cyber Watch

Confirmed. President Yoshiaki Maeda said unauthorized access breached up to about 300,000 sets of personal information, including names, addresses, ID document numbers and bank account numbers, and the My docomo service was suspended.

Confirmed. ANA said unauthorized access at its reservation contractor Amadeus may have exposed customer personal information.

Confirmed. JAL said unauthorized access to the Amadeus passenger service system exposed reservation data of about 92,000 JAL and Japan Transocean Air customers, about 2,000 of them with passport numbers.

Confirmed. NTT Docomo said unauthorised access to a member database server at contractor Sony Network Communications (So-net) exposed 443,495 records of current and former plala (S course) customers: names, phone numbers, birth dates, gender, So-net email addresses and login IDs. Passwords, cards and bank details were not included.

Confirmed. The SoftBank cloud subsidiary said a third-party ransomware attack hit its East Japan Region 1, affecting 495 companies and local governments that use the service.

Confirmed. Keio confirmed a ransomware attack on its group servers that disrupted business systems, mainly in its hotel business, and reported it to police.

Confirmed. The Digital Agency said a third party used a VPN flaw to access its staff system, possibly exposing about 246,000 records on government employees and related contacts.

Confirmed. Japan's largest taxi operator said its internal systems suffered unauthorized external access through a malware infection, taking dispatch and booking systems offline.

Claimed. The AiLock group claimed the attack and threatened to leak stolen data.

Confirmed. KDDI said attackers used a zero-day in third-party software to breach an email platform serving five ISPs, exposing 12,233,087 email addresses and 7,616,173 passwords.