Japan's government has unveiled an emergency cybersecurity package worth about ¥10 billion ($63 million) after a wave of data breaches hit major companies and government agencies.

Prime Minister Sanae Takaichi announced the package at a ministerial meeting on Friday 6 November, saying rapid response is essential against AI-generated attacks. Its four pillars are: strengthening basic security measures, including the use of artificial intelligence; gathering and consolidating information and strengthening investigation and analysis; a strategic response to attacks; and stronger support for victims and measures to stop damage spreading.

The money comes from fiscal 2026 reserve funds. The Ministry of Economy, Trade and Industry will set up a "top gun" team of cybersecurity experts by the end of November, using AI to detect weaknesses in computer systems. A "cyber rescue team" of public- and private-sector experts will go to companies hit by attacks to coordinate the first containment, while another group advises organisations at risk.

GMO attack was the trigger

The package follows a series of high-profile personal data leaks, including an extortion attack on internet service provider GMO Internet Group. The company's internal investigation points to hackers linked to the North Korean government as a possible party behind that intrusion.

The National Police Agency has set up a nationwide joint investigation into this year's large breaches, and Takaichi has ordered work on amending the active cyber defence law and on same-day attack reports from critical infrastructure. The law, which took effect in October, allows the government to access servers used by hackers as a pre-emptive measure.

The Financial Services Agency has also told banks and other financial firms to stop accepting uploaded ID photos for online identity checks before the April 2027 legal deadline, after licence images leaked, and to switch to reading the IC chip instead.