Cacco Inc. and 株式会社リンク have released the Cashless Security Report 2026. While the number of card information records leaked in 2025 fell sharply from the previous year, losses from unauthorized use remained high, with fraudulent orders of ¥10,000 or less increasing particularly sharply. Measures to address the impact of generative AI and new fraud schemes will be required going forward.
The Cashless Security Report 2026 has been released. The report analyzes statistics on credit card information leaks and trends in unauthorized use in e-commerce, highlighting as key findings that the number of data breach incidents in 2025 fell sharply to 21 and the number of records leaked fell to 246,474.
Regarding credit card information breaches, the report notes the possibility that information on co-branded credit cards incorporating a supermarket operator's own point cards was viewed without authorization in a ransomware attack on the operator. This is the first such case reported in Japan, and merchants are being urged to review their information management practices.
Losses from unauthorized use totaled ¥51.05 billion. Although this was below the previous year, losses remained high. Fraudulent orders of ¥10,000 or less increased particularly sharply, reportedly against a backdrop of malicious resale activity. Following the introduction of EMV 3-D Secure, declines in payment authorization rates and cart abandonment have also emerged as issues.
Other threats include a sharp nationwide increase in fake-president scams. Applications for the SCS assessment scheme, which aims to strengthen supply chains, are scheduled to open by the end of fiscal 2026. The report also discusses the impact of advances in generative AI on cashless security, noting ongoing changes on both the offensive and defensive sides.