In brief
Japan’s Personal Information Protection Commission said personal data for roughly 260 million people was exposed from the start of the fiscal year to mid‑October, a figure that more than doubles the country’s population. 2,094 incidents were logged, with six incidents affecting over 10 million people each, and the number of breaches spiked to 830 in the first half of October alone. Government officials declared the situation grave and pledged rapid emergency measures.
Japan’s Personal Information Protection Commission released data showing that personal information of about 260 million people was compromised from the start of the current fiscal year in April to mid‑October, according to Xinhua reporting on 31 October.
The figure, roughly double Japan’s population, includes repeated counts from multiple incidents, and the data are derived from reports by businesses handling personal information, excluding financial and telecommunications firms. Authorities warned the actual scale could be larger.
A total of 2,094 incidents of unauthorized access were recorded during the period, with six incidents leaking data on more than 10 million people each. The number of breaches has been on the rise, surging in October; 830 incidents were reported in the first half of October alone, compared with 303 in all of September.
Kyodo News cited a 2025 figure of 1,256 incidents for the entire fiscal year. Recent media reports confirm a series of large‑scale leaks involving Sony Life Insurance Co., discount retailer Don Quijote, video game publisher Bandai Namco Entertainment Inc., Kyushu University and its affiliated hospital in Wednesday, and Muji operator Ryohin Keikaku Co., restaurant chain operator Matsuya Foods Holdings Co., and All Nippon Airways in Friday.
The government is responding.
The number of large‑scale leaks is increasing rapidly, and the government is taking the situation very seriously.Chief Cabinet Secretary Minoru Kihara said at a press conference on Friday and added that an emergency countermeasure package would be compiled quickly.
