Japan holds urgent ministries meeting over string of personal data leaks
In short
Japan's government held an urgent meeting of ministries and agencies on October 8 after a series of personal information leaks caused by unauthorized access at companies across the country. Minister in charge of cyber security Furukawa Toshiharu (古川俊治) called it "an extremely urgent situation" and said businesses handling personal information would be asked to strengthen measures, including multi-factor authentication. The National Cybersecurity Office will gather information on damage and attack methods and plans to issue an alert in the coming days.
Read the full story 2 min read
Japan's government held a meeting of relevant ministries and agencies on October 8 in response to a series of personal information leaks caused by unauthorized access at companies across the country. Tokyo Shimbun reported that the government announced the meeting on the 8th, to be held that afternoon. Impress Watch reported that the National Cybersecurity Office (国家サイバー統括室, NCO) of the Cabinet Secretariat convened the meeting urgently because of the frequent leaks, bringing together all ministries and agencies. [ 2 , 4 , 5 ]
"We are in an extremely urgent situation. I believe the whole government needs to move forward with measures together," Furukawa Toshiharu (古川俊治), the minister in charge of cyber security, said, according to TBS NEWS DIG. The broadcaster reported that he asked ministries to collect information on the cases and consolidate it at the NCO, and said businesses that handle personal information would be asked to strengthen measures, including addressing system vulnerabilities, introducing multi-factor authentication and preventing misuse of leaked information. "Government bodies and businesses entrusted with personal information must strengthen their measures as their responsibility," he said. Impress Watch quoted him as saying he wanted to ask each business to strengthen its cybersecurity measures. [ 4 , 5 ]
Impress Watch reported that 29 organisations, including all ministries and agencies in Kasumigaseki and their external bureaus, took part, and six gave presentations. The Personal Information Protection Commission presented the alert it published on October 7 on responding to large-scale leak incidents, and explained that alerts had gone to businesses under its jurisdiction along with notices urging thorough protection of personal information. Tokyo Shimbun reported that NCO Cabinet cyber officer Iida Yoichi (飯田陽一) was to attend with officials from the Ministry of Economy, Trade and Industry and the Ministry of Internal Affairs and Communications, among others. [ 2 , 5 ]
Tokyo Shimbun reported that driver's licence images leaked from the car-sharing service Times Car (タイムズカー), and that damage has also come to light at Sagawa Express (佐川急便) and the yakiniku restaurant chain Yakiniku King (焼肉きんぐ), among others. [ 2 ]
According to Impress Watch, the government had been working on the safety of critical infrastructure and other areas under the Cyber Response Capability Enhancement Act (サイバー対処能力強化法), but judged that an alert going beyond the law was needed because the current leaks have hit a wide range of businesses. The NCO will collect and analyse information to examine the background of the attacks and responses, and wants information also from businesses in industries where incident reporting is not mandatory. It plans to issue an alert in the coming days. Users will be urged to follow basics such as not reusing passwords and setting up two-factor authentication, and businesses to delete personal information promptly once its purpose has been achieved and not to collect personal information they do not need. [ 5 ]
Why it matters
Impress Watch reported that the leaks have hit a wide range of businesses, including industries where incident reporting is not mandatory, which led the government to judge that an alert going beyond the Cyber Response Capability Enhancement Act was needed. Businesses and users are to be asked to review basic security measures, and businesses to delete personal information once its purpose is met and not collect information they do not need.
Key facts
- The government held a meeting of relevant ministries and agencies on October 8 over a series of personal information leaks caused by unauthorized access and cyber attacks. [ 2 , 4 , 5 ]
- Minister in charge of cyber security Furukawa Toshiharu took part in the meeting. [ 4 , 5 ]
- Furukawa called the situation extremely urgent. [ 4 ]
- 29 organisations took part, six of which gave presentations, according to Impress Watch. [ 5 ]
- Ministries were asked to consolidate information on the cases at the National Cybersecurity Office (NCO). [ 4 , 5 ]
- Businesses handling personal information are to be asked to address system vulnerabilities, introduce multi-factor authentication and prevent misuse of leaked information. [ 4 ]
- The NCO plans to issue an alert in the coming days calling for stronger cybersecurity measures. [ 5 ]
- Driver's licence images leaked from the car-sharing service Times Car (タイムズカー), and damage has also come to light at Sagawa Express (佐川急便) and Yakiniku King (焼肉きんぐ), among others. [ 2 ]
Confirmed by several sources
- The government said it would hold a meeting over information leaks caused by unauthorized access. [ 1 , 2 ]
- A meeting of relevant ministries and agencies was held on October 8 over the personal information leaks. [ 4 , 5 ]
- Furukawa Toshiharu, the minister in charge of cyber security, took part in the meeting. [ 4 , 5 ]
- Information on the cases is to be consolidated at the National Cybersecurity Office. [ 4 , 5 ]
- Furukawa called on businesses to strengthen their security measures. [ 4 , 5 ]
Still unclear
- When the NCO alert will be issued. Impress Watch reported only that it will be issued in the coming days.
- Who is behind the attacks and whether the leaks are connected. The documents do not identify attackers; Impress Watch reported the NCO will analyse information to examine the background of the attacks.
- How many people's data has leaked in total. No document gives a figure.
What local media are saying
Timeline, local time
- Nishi-Nippon Shimbun reports the government will hold a meeting over information leaks from unauthorized access. [ 1 ]
- Tokyo Shimbun reports the government announced a meeting of relevant ministries for that afternoon. [ 2 ]
- TBS NEWS DIG reports Furukawa called the situation extremely urgent and will ask businesses to strengthen measures. [ 4 ]
- Impress Watch reports the NCO held the meeting with 29 organisations and plans an alert in the coming days. [ 5 ]