The government indicated that it would compile an emergency cybersecurity measures package by the end of next week, and instructed officials at a meeting to strengthen countermeasures and calculate the required budget. Discussions progressed on the response to data breaches at companies including GMO.
At a cabinet meeting attended by the prime minister, the government presented a plan to compile additional emergency cybersecurity measures by the end of next week. The government confirmed its policy of strategically considering all response options, including neutralization, on the grounds that the nature of the cyberattack had been identified.
The case attracting attention involves GMO Internet Group, which publicly stated that it had requested the government to undertake active cyber defense after customer information was leaked. Although legislative amendments enable the government to conduct active cyber defense, it was noted that the provisions do not apply when the request comes from a private company.
According to the company's public relations department, the leak originated with the desktop cloud service of onamae.com, after which suspicious transactions occurred. As recovery for affected customers, the company is considering compensation and indicated its intention to pay ¥5,000 to all service users.
Data breaches at other companies have also been reported. Ymirlink indicated that up to 51.6 million items of personal information may have been exposed in a past data breach. The information may include some customer data for smartEX, the online Shinkansen booking service operated by the JR Group. The Rakuten Group disclosed that up to 2.6 million records may have been exposed on its overseas hotel booking site.