Japanese government launches emergency cybersecurity package to respond to attack wave
The Japanese government on November 6 adopted an emergency cybersecurity package to address a series of recent personal data breaches caused by unauthorized access. Prime Minister Sanae Takaichi instructed that the plan be drawn up on October 26, and it was approved at the relevant ministers' meeting that day.
The package contains four pillars: strengthening basic security measures through AI, enhancing information collection and analysis capabilities, taking a strategic response to attack methods, and strengthening support for victims and preventing damage from spreading. Specific measures include establishing a “top gun” expert team that uses AI to detect system vulnerabilities (the Ministry of Economy, Trade and Industry plans to set it up by the end of November), forming a public-private “cyber rescue team” to support companies' initial response, and accelerating discussions on forcing access blocks to websites that display stolen personal information.
The government has decided to allocate about 10 billion yen (about 63 million U.S. dollars) from reserve funds for fiscal 2026 for immediate measures, including using AI to check vulnerabilities in government systems, purchasing police investigation equipment and providing personnel training, and strengthening the Digital Agency's system security. The package aims to build a society with cybersecurity resilience that is among the “highest in the world,” and it is considering revising related laws to strengthen response capabilities.
Original source:
Title: Japan unveils emergency cybersecurity package amid data breach concerns Publisher: Kyodo News Publication date: 2026-11-06 URL: https://english.kyodonews.net/articles/-/90630 Source type: media report (quoting government meetings and the package) Verification: Kyodo full text was read this time and cross-checked against Nippon.com/Jiji and others; verification date 2026-11-06 Supported content: all core content in the body, the four pillars, funding scale, and specific measures
ABAB AI Insight
Japanese Prime Minister Sanae Takaichi instructed the relevant ministers to draw up an emergency cybersecurity package on October 26, and it was adopted at a ministerial meeting on November 6. The package responds to a series of recent data breaches at companies and institutions, including the ransomware attack on GMO Internet Group, an internet service provider. The government acknowledged that basic security measures were insufficient in several recent breach cases.
On the capital and capability side, about 10 billion yen in reserve funds will be used for immediate measures: about 2 billion yen for AI checks of vulnerabilities in government systems, about 4.1 billion yen for police investigation equipment and training, and about 3.8 billion yen for Digital Agency system security. The package plans to establish a “top gun” expert team to use AI to counter hackers and detect vulnerabilities, and to work with overseas IT companies and advanced AI developers to update vulnerability information; it will also form a public-private “cyber rescue team” to support companies' initial response, with the secretariat planned to be set up within this fiscal year.
Compared with the “active cyber defense” law that took effect on October 1, this package focuses on defense, information sharing, and victim support rather than directly neutralizing attack servers. A similarity is that both are being promoted by the Takaichi government; the key difference is that the emergency package is launched with reserve funds and focuses on AI-assisted support and rescue teams, while the active defense law authorizes the government to take offensive measures under specific conditions. The package also accelerates discussions on blocking websites that display stolen data, and requires critical infrastructure to report attacks as quickly as possible within hours and at least on the same day.
For Japanese companies and institutions, the public-private rescue team and AI vulnerability detection provide resources for initial response and system hardening. For the government, the 10 billion yen reserve fund and instructions to revise laws shift response capability from dispersed reactions to centralized coordination. The package sets “world-class” resilience as its goal, but the effectiveness of implementation will depend on subsequent budget additions, the speed of team formation, and progress on legal revisions.
ABAB News · Cognitive Law
The about 10 billion yen reserve fund for AI vulnerability checks, police investigations, and Digital Agency security forms the financial basis for immediate measures.
The four pillars cover AI basic measures, intelligence analysis, strategic response, and victim support, rather than a single technical approach.
The “top gun” team and public-private rescue team are planned to be established this month or within this fiscal year, embedding expert capabilities into public-private response processes.