Follow us on Google News
Japan has approved an emergency cybersecurity package worth approximately ¥10 billion ($63 million) to strengthen national cyber defences following a series of attacks that exposed personal information and disrupted major businesses and government services.
Prime Minister Sanae Takaichi announced the measures on November 6, 2026, following a ministerial meeting in Tokyo. The government plans to establish specialist teams using artificial intelligence to identify vulnerabilities, respond to cyberattacks and help affected organisations recover.
The package also includes stronger cooperation between government agencies, police, defence authorities and private cybersecurity companies.
Japan has experienced a wave of cyber incidents involving unauthorised access, information leaks and disruption to essential business operations. The government has acknowledged that basic security weaknesses contributed to several recent incidents.
The latest approval converts previously announced emergency plans into a funded programme, although individual teams and capabilities are still being established.
FCRF’s Chief AI Officer Certification Returns on November 14 to Prepare Future AI Leaders
¥10 Billion Package Targets Government And Police Systems
Japan’s government has allocated approximately ¥10 billion from its fiscal 2026 reserve funds to begin implementing the emergency measures.
Around ¥2 billion will support AI-assisted vulnerability assessments of government information systems.
These assessments involve examining software, networks and digital infrastructure to identify security weaknesses before criminals can exploit them.
Another ¥4.1 billion has been earmarked for police cybersecurity investigations, including equipment procurement and specialist training.
Approximately ¥3.8 billion will strengthen security across systems operated by Japan’s Digital Agency.
The amounts are approximate components of the overall funding package.
The government is also examining additional financial measures required to implement longer-term cybersecurity improvements.
Takaichi has instructed ministers to strengthen information-sharing, investigative capabilities and assistance for organisations affected by attacks.
The objective is to improve the country’s ability to prevent cyber incidents while limiting the damage when an intrusion succeeds.
AI-Powered Cybersecurity Team To Begin Work This Month
A significant part of the programme involves establishing a specialist cybersecurity team within the Ministry of Economy, Trade and Industry.
The unit, described as a team of highly skilled cybersecurity experts, is expected to be established by the end of November.
Its responsibilities will include simulated cyberattacks, penetration testing and identifying vulnerabilities in government and business systems.
Penetration testing involves authorised security specialists attempting to find weaknesses using methods similar to those employed by criminals.
The proposed unit will use advanced AI tools to examine systems and assist specialists in testing security protections.
Japan also intends to cooperate with technology companies and advanced AI developers in friendly countries to strengthen its capabilities.
The development follows concerns that criminals are increasingly using AI-assisted tools to identify software weaknesses, generate attack scripts and carry out intrusions more rapidly.
However, the use of AI in cybersecurity testing does not automatically establish that every recent Japanese cyberattack was conducted using artificial intelligence.
The government has not disclosed which specific AI models the new unit will employ or how their performance will be evaluated.
Cyber Rescue Teams To Help Companies After Attacks
The emergency package also introduces measures intended to assist businesses that experience cyber incidents.
A proposed cyber rescue team will bring together experts from government agencies and the private sector to support organisations during the initial stages of an attack.
Such assistance could include investigating suspicious activity, identifying compromised systems and recommending steps to prevent further damage.
Early intervention is particularly important when attackers attempt to steal data, encrypt business systems or maintain unauthorised access to corporate networks.
A separate specialist team will help vulnerable organisations strengthen their defences before incidents occur.
Small and medium-sized businesses could benefit from additional support because many lack the resources to employ dedicated cybersecurity investigators.
For incidents affecting national security, Japan plans to mobilise a joint response team involving the Defence Ministry, National Police Agency and National Cybersecurity Office.
This would allow different authorities to coordinate their response when a cyberattack threatens particularly sensitive systems.
The government is also considering measures to restrict access to websites displaying stolen personal information.
However, such intervention raises questions about the legal powers required, the circumstances in which access restrictions may be imposed and the safeguards governing their use.
Japan Seeks Stronger Powers Against Cyberattack Infrastructure
The new measures build upon Japan’s existing efforts to develop more active cybersecurity capabilities.
Rather than relying exclusively on defensive tools installed within an organisation’s systems, active cyber defence can involve identifying and disrupting infrastructure used to conduct attacks, subject to applicable legal restrictions.
Japan introduced legislation governing such capabilities earlier in 2026, with relevant provisions entering into force in October.
The November package includes further efforts to strengthen the government’s capacity to investigate malicious servers and coordinate responses.
Takaichi has also instructed Digital Transformation Minister Toshiharu Furukawa to examine possible amendments to the country’s cyber response legislation.
The proposals therefore involve both immediate spending and potential longer-term changes to Japan’s cybersecurity framework.
The urgency follows several major incidents affecting Japanese businesses, including breaches involving cloud services, customer information and financial transactions.
In recent weeks, companies such as GMO Internet Group have disclosed serious security failures and announced measures to compensate affected customers.
These incidents have highlighted how compromised technology providers can expose information or disrupt services used by numerous businesses and individuals.
Japan’s challenge will be to ensure that its proposed cyber teams can respond quickly across different industries while maintaining proper oversight over investigative powers.
The approved funding provides resources for immediate action, but the effectiveness of the programme will depend on implementation, specialist recruitment and cooperation from affected organisations.
What This Means For You:
Businesses should maintain tested backups, restrict privileged access and prepare procedures for responding to cyber incidents. Individuals affected by data breaches should monitor their accounts and remain alert to phishing attempts using stolen personal information.
