Skip to content
Hacker Posts

Japan approves ¥10bn emergency cybersecurity package

Japan's government approved a ¥10 billion ($63M) cyber package after a wave of corporate breaches: active cyber defense, an AI-assisted response unit, and public-private rescue teams.

Published 3 min read
policyjapanactive-cyber-defenseai-security

Japan's government approved an emergency cybersecurity package worth about ¥10 billion (~$63 million) on November 6, after a run of breaches across Japanese companies and agencies. Prime Minister Sanae Takaichi announced it at a meeting of related ministers. The centerpiece is "active cyber defense" — newly legalized authority for the state to access and neutralize servers used by attackers — alongside several new response teams.

No English-language government text of the package has been published; this post is based on reporting by SecurityWeek/AP and Japanese outlets, including Nippon.com/Jiji and Asia News Network.

What the package contains

Per the AP account, the plan funds:

  • Active cyber defense. Expanded authority for the government to reach into attacker infrastructure. The underlying power was legalized in October; Takaichi said the government would "strategically select and implement all available response options." Reporting describes police and the Self-Defense Forces infiltrating and disabling attack servers.
  • A national-security response team drawn from the Defense Ministry, National Police Agency, and National Cybersecurity Office, deployed when an attack threatens national security.
  • A METI "top gun" unit of cybersecurity experts, to be stood up by the end of November, tasked with using AI to find network weaknesses and counter attackers, working with technology firms and AI developers from allied countries.
  • A cyber rescue team of public- and private-sector experts to give initial incident response to companies under attack, plus a separate team to help weaker companies harden their defenses.

What triggered it

The package follows what officials describe as a wave of unauthorized-access incidents and data leaks across Japan. The most concrete example in the reporting: GMO Internet Group disclosed an intrusion and requested active cyber defense; CEO Masatoshi Kumagai said the company refused the attackers' ¥7.9 billion (~$50 million) demand and paid nothing. Japan's National Cybersecurity Office assessed a "high possibility" that AI is being used in the attacks.

What to watch

  1. If you operate in Japan, map the new cyber rescue team into your incident-response contacts; it is meant to provide first response to attacked firms.
  2. Track the active-cyber-defense scope. Authority to access third-party servers raises questions for multinationals whose infrastructure could sit in the blast radius of a government operation.
  3. Treat the AI claims skeptically. "Using AI to counter hackers" is a line every vendor and agency now recites; watch for concrete capability (and published results) before assuming the "top gun" unit changes attacker economics.

Context

Japan is the latest government to move active, server-side cyber defense from doctrine into funded capability, following similar normalization elsewhere. The more durable signal for defenders is the pairing: a national rescue-and-hardening apparatus for victims on one side, and legalized offensive reach on the other. Whether the AI-assisted unit is more than branding is the open question — this beat rewards waiting for evidence over announcements.

Related stories