240,000 Hit by Data Breach at Japan’s Digital Agency

Japan's Digital Agency suffered a data breach affecting approximately 240,000 individuals due to exploitation of a vulnerability in a VPN product. The attackers accessed personal information including names, email addresses, phone numbers, and workplace-related addresses. The breach was discovered in late June 2026 and involved unauthorized use of a maintenance employee's account. No sensitive information such as identification numbers or financial data was compromised. The agency blocked external access to the affected server and suspended the compromised account. The exploited VPN vulnerability was publicly disclosed prior to the attack. No other systems or general public information were affected.

• securityweek.com/240000-hit-by-data-breach-at-japans-digital-agency/ (opens in a new tab)