Japan to ask companies to fix system vulnerabilities after string of data leaks
In short
Japan's government held a meeting of relevant ministries on October 8 after a series of personal information leaks caused by unauthorised access at companies across the country. Toshiharu Furukawa (古川俊治), minister in charge of cyber security, said the government will ask companies to take measures against system vulnerabilities, strengthen personal authentication and prevent misuse of leaked information.
Read the full story 1 min read
Japan's government on October 8 convened a meeting of relevant ministries in response to a series of personal information leaks caused by unauthorised access at companies across the country, Tokyo Shimbun and Sankei Shimbun reported. A Tokyo Shimbun photo caption placed the meeting in Kasumigaseki, Tokyo, on the afternoon of October 8. Toshiharu Furukawa (古川俊治), minister in charge of cyber security, said the government will ask companies to take measures against system vulnerabilities, strengthen personal authentication and prevent the misuse of leaked information. [ 1 , 3 ]
The government will also seek stronger measures that cover companies' outsourcing contractors and will strengthen its response with cyberattacks using artificial intelligence (AI) in mind, the reports said. "Government agencies and businesses that hold personal information must strengthen their measures as their responsibility," Furukawa said. He asked each ministry to collect information on leak cases at companies and other bodies under its jurisdiction and to consolidate it at the National Cybersecurity Office (国家サイバー統括室, NCO). [ 1 , 3 ]
According to the NCO, unauthorised-access incidents at companies appear to have increased sharply since August, Sankei Shimbun reported. Driver's licence images were leaked at the car-sharing service Times Car (タイムズカー), and damage has also come to light at Sagawa Express and the yakiniku restaurant chain Yakiniku King (焼肉きんぐ), the newspaper said. [ 3 ]
On October 9, Tokyo Shimbun and Nishi-Nippon Shimbun ran headlines saying the government had asked companies to take measures against information leaks and that leaks could develop into a "management risk". [ 5 , 6 ]
Why it matters
The government said it will seek stronger measures that also cover companies' outsourcing contractors and will strengthen its response with cyberattacks using AI in mind. Headlines in Tokyo Shimbun and Nishi-Nippon Shimbun on October 9 said information leaks could develop into a "management risk" for companies.
Key facts
- The government held a meeting of relevant ministries on October 8 over a series of personal information leaks caused by unauthorised access at companies nationwide. [ 1 , 3 ]
- Cyber security minister Toshiharu Furukawa said companies will be asked to address system vulnerabilities, strengthen personal authentication and prevent misuse of leaked information. [ 1 , 3 ]
- The government will seek stronger measures that include outsourcing contractors and will strengthen its response with cyberattacks using AI in mind. [ 1 , 3 ]
- Ministries were asked to collect information on leak cases at companies they oversee and consolidate it at the National Cybersecurity Office (国家サイバー統括室, NCO). [ 1 , 3 ]
- According to the NCO, unauthorised-access incidents at companies appear to have risen sharply since August. [ 3 ]
- Driver's licence images leaked at car-sharing service Times Car (タイムズカー); damage has also come to light at Sagawa Express and yakiniku chain Yakiniku King (焼肉きんぐ). [ 3 ]
Confirmed by several sources
- The government plans to ask companies to take measures against system vulnerabilities following a series of unauthorised-access incidents. [ 1 , 2 , 3 ]
- A meeting of relevant ministries was held on October 8. [ 1 , 3 ]
- Furukawa asked ministries to gather information on leak cases and consolidate it at the NCO. [ 1 , 3 ]
Still unclear
- When and in what form the request to companies will be issued. October 8 reports describe a plan to make the request; October 9 headlines say the government has made it, with no further detail available.
- How many companies have been affected. No document gives a number; the surge since August is reported only by Sankei Shimbun, citing the NCO.
- What the "management risk" for companies involves. It appears only in October 9 headlines without accompanying text.
What local media are saying
Timeline, local time
- October 8: Tokyo Shimbun reports the ministries' meeting and the government's plan to ask companies to address vulnerabilities. [ 1 ]
- October 8: Sankei Shimbun reports the meeting, adding the NCO's view that incidents surged since August and naming affected companies. [ 3 ]
- October 9: Tokyo Shimbun headline says the government asked companies to take information leak measures, citing a possible management risk. [ 5 ]
- October 9: Nishi-Nippon Shimbun carries the same headline. [ 6 ]