Japan's Personal Information Protection Commission tallies some 260 million records leaked through unauthorised access since April, as a breached email-delivery vendor hits multiple companies

A tally by the Personal Information Protection Commission, reported on 29 October, puts personal data leaked through unauthorised access since April 2026 at roughly 260 million records. The same day, a breach at the corporate email-delivery provider Ymirlink led Life Card to disclose a possible leak of about 339,000 customer records and the Asahi Shimbun more than 70,000, while the email-delivery firm Arara reported some 3.01 million registered addresses exposed, continuing a pattern in which compromised vendors spread damage across many companies. The government plans to compile its emergency package of measures against cyber attacks around next week.