Japan on cybersecurity alert: what the wave of attacks reveals (and how Brazil compares)
In recent weeks, the Japanese government raised its tone in the face of a sequence of cyberattacks and data leaks that hit companies, local governments, and critical services. The National Cybersecurity Office and several agencies issued coordinated guidance, while authorities from the ruling party described the situation as something close to a “state of emergency in cyberspace”.
What is happening in Japan
The country recorded hundreds of unauthorized-access incidents in 2026, surpassing the 2025 total already in the third quarter. In September and October the situation intensified with a wave of consumer data leaks and ransomware attacks.
Among the most relevant cases:
Times Car (a car-sharing service): data from about 6.6 million accounts, including images of identity documents.
skyticket, Yakiniku King, BookOff, Lawson, and others: leaks that, added together, exceed tens of millions of records.
A ransomware attack on IDCF Cloud (from SoftBank), which affected hundreds of companies and local governments.
The SpeeCAN RAIDEN service, used by hundreds of municipalities for disaster alerts: potential exposure of millions of email addresses.
Official recommendations include software updates, use of multifactor authentication, reinforcement of the supply chain, deletion of unnecessary data and, in the financial sector, guidance that banks stop accepting photos of identity documents and start reading the document chip.
The new Active Cyber Defense legislation, which took effect in early October, also began to allow more proactive responses to external threats.
Comparison with Brazil
The Brazilian picture is different in form, but equally under pressure.
While Japan lived through a concentrated peak of large customer-data leaks, Brazil shows up more often in global ransomware rankings. In September 2026 the country recorded 31 claimed victims and rose to 3rd place worldwide, against the global downward trend. Brazil also leads Latin America in this type of attack and concentrates most of the region’s intrusion attempts.
In Brazil, the risk is amplified by the CPF as a universal identifier and by the high incidence of financial fraud (including via Pix). In Japan, the recent problem concentrated more on massive consumer-data leaks and on impacts to cloud services and emergency alerts.
Across four aspects, the difference looks like this.
Dominant type. Japan, in the recent wave: large customer-data leaks and ransomware. Brazil, in 2026: continuous ransomware and identity fraud.
Ransomware ranking. Japan: high volume, but less prominence in monthly global rankings. Brazil: frequently in the global top 3–6.
Public response. Japan: coordinated multi-agency alerts and emergency language. Brazil: an institutional structure (PNCiber, ANPD, PF), with more distributed responses.
Most sensitive data. Japan: document images, emails, customer data. Brazil: CPF and financial data.
What this means in practice
The Japanese wave shows that even countries with a high level of digitization and regulation struggle when attacks exploit web applications, suppliers, and poorly managed data — especially with the use of AI to speed up scans and social engineering. In Brazil, the pressure is more continuous and is concentrated on ransomware and financial crime.
For users and companies, the basic measures remain the most effective: multifactor authentication, constant updates, data minimization, and care with suppliers. The difference is that the scale and sophistication of the attacks are reducing the margin for error.
In the context of digital assets and online tools, the lesson is direct: the security of infrastructure and personal data has become part of economic protection. Incidents that start in cloud services or identity systems can spread quickly and affect everything from corporate operations to trust in digital platforms.
The Japanese episode and the Brazilian picture reinforce the same point: cybersecurity stopped being only a technical topic and became a factor of economic resilience and service continuity.
Main sources: reporting from the Associated Press, the Financial Times, Japan Cyber Watch, data from TrendAI/Trend Micro, Ransomware.live, and official Japanese statements from October 2026.