Urgent Proposal on AI Cybersecurity Measures | Team Mirai

What is happening now

Information leaks are continuing at the worst pace on record. Attacks are now affecting daily life. Team Mirai gave an urgent proposal to a state minister and asked the public to share their experiences.

Key numbers and facts

• As of October 13, 2026, there were 485 leaks caused by cyberattacks. This is already more than the whole of last year.
• Leaks of more than 1 million records: 10 so far in 2026, compared with 6 in all of 2025 (listed companies and their subsidiaries, as of October 5, 2026).
• Leaks of more than 10 million records: 3 cases, the same as the total for the past 14 years up to 2025.
• A police survey found that only 19.7% of companies and groups that reported an incident told the police. 56.3% said they did not report it at all.
• Cyberattacks are cheap for criminals. One estimate puts the cost of an attack at tens of dollars per target (about 4,000 yen per attack).

Services people use were hit

In October, a serious flaw was found in PHP, a tool used by many websites. MUFG Bank paused some internet services to block attacks. Hospitals, a stock broker, a delivery company, a city emergency alert system, a taxi company and a childcare app were also disrupted. In one brokerage case, 7 accounts had trades placed that the customers never ordered. Some victims also said they got many suspicious calls after their driver's license data leaked.

Why this matters

AI can help attackers do work that used to take people a long time. This lowers the barrier to crime, so more companies, even small ones, may become targets. Many people say they feel unsafe, and some say that companies and leaders are slow to act. Team Mirai says the government should lead the plan, instead of leaving it to companies alone.

What to watch

• Whether the government adopts Team Mirai's seven proposals, including AI for defense and a special investigation body for major cyber incidents.
• How many more leaks and service stops are reported in the coming weeks.
• Whether the investigations into affected hospital and bank data show how many people were harmed.
• Whether new laws are made to require companies to take security responsibility.