Skip to content
TALAYINSIGHT

JP · Government · Bank of Japan · Asia-Pacific

Japan

Limited room for manoeuvre · updated 6 November 2026

What they did

According to a Jiji report of 5 November, the government is taking an emergency cyber package to the 6 November cabinet meeting. It includes a public-private cyber rescue squad to support attacked organisations in the first response, with a secretariat to be set up by the end of fiscal 2026. In serious attacks, a joint team from the National Cybersecurity Office, the police, the Defence Ministry and the Self-Defense Forces will be deployed. Macnica counted 239 ransomware attacks in January–October, already above 2025's 228.

Why

Cyber losses land on balance sheets rather than with insurers: Japanese policies do not cover ransoms, often exclude business interruption, and only 8.8% of SMEs are insured. GMO is paying 5,000 yen per customer, while one major insurer caps apology payments at 1,000 yen a person. In monetary policy, underlying inflation is seen at the 2% target, but weak domestic demand is holding back faster moves.

What they must do

It must deliver the emergency cyber package that Takaichi assigned on 26 October to the week of 2–8 November, and decide whether the coverage gap falls on the public purse or on companies. It needs to reopen the energy monitoring site with disclosure of the leak, close the skills gap and clarify the legal test for network-level blocking. In monetary policy it must manage communication without triggering fresh yen weakness.

What comes next

First up is the package text due for approval at the 6 November cabinet meeting: watch whether it includes fiscal support, SME aid or a publicly backed risk mechanism, and who will hold the authority for formal state attribution. A Takaichi–Xi meeting at the APEC summit in Shenzhen on 18–19 November, and Tokyo's stance on Taiwan, come second. Cable protection funding will show up in the December budget draft.

Preference

Anchor core inflation around 2%; joint attribution and warnings with the United States and allies in cyberspace.

Observed behaviour

On cyber it cooperates with allies in the field, but at home the data is scattered across secondary layers; on raw materials it is turning to non-Chinese supply contracts rather than building a channel to Beijing.

Sources

  1. Nippon.com (Jiji Press) — Japan's Emergency Package to Feature Cyber Rescue Squad (5 November 2026)
  2. Xinhua — Ransomware attacks on Japanese companies more than double since 2021 (5 November 2026, state media)
  3. Asia News Network (Yomiuri Shimbun) — Chinese ships suspected of surveying undersea cables near Japan, Philippines (2 November 2026)
  4. The Japan Times — Asia for China? Tokyo's answer to Beijing's coercive strategy (3 November 2026)
  5. Insurance Journal (Bloomberg) — Japan's Cyberattack Surge Tests Its Push to Strengthen Defenses
  6. ビジネス+IT — 電力・ガス取引監視等委員会のデントリネットに不正アクセス
  7. NOVAIST — 高市首相、サイバー緊急対策を11月上旬に取りまとめへ
  8. Aviation A2Z — Cathay Pacific Confirms Data Breach Affecting 53,000 Bookings
  9. Nippon.com (Jiji) — Japan Govt Seeks Website Block after GMO Cyberattack
  10. TokenPost — GMO Yen Bond Spread Widens 52 Basis Points After Cyberattack
  11. Innovatopia — What cyber insurance pays for, and what it does not
  12. ITmedia NEWS — Data on about 2.59 million So-net members leaked
  13. Taipei Times (Reuters) — Japanese firms to pay out after wave of cyberattacks
  14. MLex — Japan's Park24 details Times Car breach, offers payments
  15. NHK — タイムズカー 免許証など画像流出の痕跡 約146万件
  16. Jiji Press — ＧＭＯ、能動的防御を要請 不正アクセス攻撃で政府に
  17. Impress Watch — 不正アクセスを受けたGMOに金銭要求 政府に「能動的サイバー防御」要請
  18. Focus Taiwan — 8 Japan Coast Guard vessels shadowed by China near Penghu: Taiwan
  19. Nikkei Asia — BOJ to hold rate at 1.25% at meeting next week
  20. investingLive (Reuters) — BOJ reportedly may upgrade inflation forecast, hold rates steady at next week's meeting
  21. FXStreet — Japanese Yen: BoJ hawkish hold keeps January hike in focus (Standard Chartered)
  22. BleepingComputer — Capcom confirms data breach affecting 11.7 million accounts
  23. Notebookcheck — Capcom confirms major data breach affecting more than 11.7 million Capcom ID accounts worldwide
  24. The Record — Microsoft blames ConnectWise attacks on Chinese state hacker using ARTEX AI agents
  25. Onamae.com (GMO Internet) — [お名前.com デスクトップクラウド]第三者による不正アクセスに関するお詫びとお知らせ
  26. BleepingComputer — Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected
  27. Nikkei Asia — Japan growth strategy to focus on chips in short term, AI in medium term
  28. Taipei Times — Japan, US launch drills focusing on islands near Taiwan
  29. Nikkei Asia — Japan plans certifications for data centers, cloud services to curb China risk
  30. Kumamoto Nichinichi Shimbun (Kyodo) — ヤマト運輸、531万件情報流出 顧客氏名や住所、不正アクセス
  31. nippon.com (Jiji) — More Japanese Firms Disclose Details of Data Breaches
  32. Nikkei Asia — Japan's Kioxia sheds two-thirds of peak market value as China chip rivals emerge
  33. Evertiq — Foxconn to take 50% stake in Mitsubishi Electric's automotive business
  34. Financial Services Agency (FSA) — 現下の情勢を踏まえたサイバーセキュリティ対策の強化 (9 October 2026)
  35. piyolog — 国内で相次ぐ不正アクセスに対する注意喚起についてまとめてみた (11 October 2026)
  36. Park24 — タイムズカーWebシステムへの不正アクセスに関する調査結果（第3報）
  37. Cybersecurity-jp — 手間いらずに不正アクセス、最大約445万人の宿泊予約情報が漏洩した可能性
  38. Impress Watch — Roundup of personal data leaks in early October (9 October 2026)
  39. nippon.com (Jiji) — JR East 6.09 million, Book Off 6.43 million as unauthorised access spreads
  40. NHK — Up to 1.3 million email addresses at risk at JR Kyushu (9 October 2026)
  41. The Economy — Chinese rare earth supplies to Japan dry up
  42. BleepingComputer — Germany arrests alleged core Qilin ransomware member after extradition
  43. The Record — Japan confirms arrest of Russian Qilin operative, extradition to Germany
  44. Nikkei Asia — Japan food tax cut gets cabinet approval with key questions unanswered
  45. Impress Watch — IDCFクラウドの障害は「ランサムウェア攻撃」が原因 495の企業・自治体に影響
  46. SBS News — SoftBank Subsidiary Hit by Ransomware, Affecting 495 Companies and Local Governments
  47. MLex — Japan cloud ransomware attack exposes municipal backup vulnerabilities
  48. The Record — International coalition seizes tools used by cyber firm behind Flax Typhoon
  49. Ministry of Finance Japan — Auction Result of 10-Year JGBs on October 6, 2026
  50. Bank of Japan — Change in the Guideline for Money Market Operations (18 September 2026)
  51. セキュリティ対策Lab — 大阪公立大学ランサムウェア被害 続報（2026年10月5日）

Related events

05/11MediumII Cyber & InfrastructureAsia-PacificJapan's emergency cyber package creates a public-private rescue team04/11MediumV Tech & AIAsia-PacificJapan criticises Chinese rare-earth curbs at APEC ahead of Shenzhen summit02/11MediumII Cyber & InfrastructureAsia-PacificChinese research ships linger over Taiwan's and Japan's undersea cables02/11MediumII Cyber & InfrastructureAsia-PacificGMO chief admits ignoring internal warning, leaving the bill on its books30/1006:02HighIV Macro & DebtAsia-PacificBank of Japan says it has hit its price goal, opening the door to December30/10MediumII Cyber & InfrastructureEuropeThree-year Amadeus breach exposes airlines' shared supplier risk29/10MediumII Cyber & InfrastructureAsia-PacificTokyo asks carriers to block the GMO attacker's website28/10MediumII Cyber & InfrastructureAsia-PacificGMO puts a $1 million bounty on the hackers behind its breach28/10MediumI Geo-EconomicsSouth AsiaJapan pledges 46.56 billion yen in loans to Bangladesh27/10MediumIV Macro & DebtAsia-PacificJapan's far-end yields stay high even as the BOJ holds

Reports

VTech & AI·Analysis·Asia-Pacific

A supplier contract and a Taipei bill now squeeze China's AI compute

Technology Geopolitics Desk · 5 November 2026 · 7 min

VTech & AI·Analysis·Asia-Pacific

Beijing and Washington build new licensing gates around an unwritten truce

Technology Geopolitics Desk · 3 November 2026 · 8 min

VTech & AI·Analysis·Asia-Pacific

The rare earth bottleneck is a 16-fold price gap, not a deadline

Technology Geopolitics Desk · 31 October 2026 · 7 min

IICyber & Infrastructure·Analysis·Asia-Pacific

In Japan, the cyber bill lands on balance sheets, not policies

Cyber & Critical Infrastructure Desk · 30 October 2026 · 6 min

Multipolar View