Japan Hits 600 AI-Fueled Cyberattacks, Tops 2025 [2026]

The breach with the largest blast radius hit Times Mobility, operator of the Times Car rental and car-sharing service. Window attackers reached roughly 6.6 million current and former customer accounts, including about 1.6 million identity-verification documents. Those files included scanned driver’s licenses with personal photographs, utility bills and student ID images, the kind of data that is far more damaging in the wrong hands than a password.

Daiwa Securities and Citizen Watch were hit. Daiwa disclosed that up to 220,000 customer records were exposed. Citizen said roughly 100,000 people’s personal information was potentially accessed. 

Ransomware in SoftBank disrupted services for 495 companies and local governments that relied on its hosting, a scale that pushed it beyond a single-company story into critical-infrastructure territory.