In a significant event highlighting the rising concerns in cybersecurity, an internet service provider associated with Sony has reported a major breach, revealing that hackers have compromised approximately 2.6 million subscriber records. This incident has occurred amidst an escalating wave of cyberattacks that have compelled the Japanese government to introduce a series of emergency measures aimed at bolstering cybersecurity.

On Tuesday, Sony Network Communications acknowledged that an unauthorized entity accessed the So-net subscriber database, which has raised alarms not only for its own users but also for around 443,500 subscribers of NTT Docomo who are part of the “plala (S course)” plan. This breach underscores the vulnerability of user data amid a landscape increasingly marked by cyber infiltrations.

The announcement followed a ministerial meeting led by Prime Minister Sanae Takaichi, held on Monday, where she emphasized the critical need for enhanced collaboration between the public and private sectors in the realm of cybersecurity. During this meeting, Takaichi outlined plans for a forthcoming government initiative aimed at improving national cybersecurity frameworks.

Japan’s cybersecurity landscape has been significantly impacted by a recent surge in data breaches. Earlier in June, KDDI, a prominent Japanese telecom operator, reported that hackers had infiltrated one of its email systems, affecting as many as 14.2 million users across five other ISPs. In September, Japan’s Digital Agency disclosed another alarming breach, noting that a hacker exploited a vulnerability in a VPN to gain access to hundreds of thousands of email addresses and around a thousand physical addresses.

According to reports from Macnica Security, there have been 119 breach disclosures involving personal information leaks from Japanese networks through October 6 alone, with a staggering 81 incidents reported since July. This troubling trend has not shown signs of abating. Notably, Japan Airlines recently disclosed that a data breach involving a third-party IT provider had impacted approximately 90,000 passengers, further highlighting the prevalence of cyber threats.

Detailed reports from Sony Network Communications indicate that 2,141,986 So-net records and 443,495 NTT Docomo records were exposed during the breach. The compromised information included sensitive details such as names, phone numbers, email addresses, birthdates, gender, and user IDs. Alarmingly, the records also encompassed data on former subscribers who had canceled their services since March, as the provider retains this information for a limited time to handle final billing and customer inquiries.

The breach reportedly compromised passwords for 54,401 email addresses, including credentials that could have allowed attackers to manipulate emails via So-net Webmail. To safeguard users, the company has proactively initiated the process of resetting these passwords. Fortunately, the credentials for the free basic mailbox service were not among those exposed. Additionally, attackers accessed 16 bank account records and seven records containing password-reset notifications, prompting the company to reset these passwords as well.

The breach is believed to have occurred on October 19, and it has been confirmed that attackers did not use customer passwords to gain unauthorized access to the database. In response to the increasing cyber threats, the Japanese government has already taken steps to intensify breach reporting requirements. As of October 1, mandatory incident reporting for designated critical infrastructure operators is now in effect.

In reaction to the growing cyber crisis, Takaichi has proposed an emergency package aimed at fortifying Japan’s cybersecurity infrastructure. This package not only seeks to expand existing responses but also emphasizes the need for private-sector collaboration in incident response and recovery efforts. The proposal includes recommendations for simulated attack testing utilizing advanced AI technologies and rigorous supply chain monitoring protocols.

As part of its strategy, the Japanese government plans to engage in international efforts to identify cybercriminals and evaluate various responses, including potential access and neutralization measures against cyber threats, as emphasized by Takaichi in her discussions.

With additional reporting by ISMG’s David Perera in Northern Virginia.