Wave of Cyberattacks on Government Agencies Sparks Doubts Over My Number Card Security

From our other sites

The story

As cyberattacks targeting Japanese government agencies pile up, doubts about the security of the My Number Card (Japan’s national ID card) are spreading. In the source article, Takayuki Sugiura, representative director of the Japan Hacker Association, gives the IC chip a qualified vote of confidence for now, arguing that if chip data were actually being stolen, credit card fraud would already be rampant. The backdrop: starting next April, a revised anti-money-laundering law will require financial institutions to verify identity solely by scanning the IC chip on a My Number Card or driver’s license — and this comes right after news broke of a leak involving driver’s license photo data. The 5ch thread sprawled from there, with posters pointing out that people are conflating the card’s own security with the risk of the linked databases being breached, and others questioning the IT literacy of past cybersecurity ministers.

Takayuki Sugiura, representative director of the general incorporated association “Japan Hacker Association,” also commented:

“If IC chip data were being stolen, credit cards — which can be directly converted into cash — would be hit before the My Number Card. But so far, no such data has been stolen. Even as AI keeps advancing, I think the IC chip will remain safe for the time being.”

As it happens, the revised Act on Prevention of Transfer of Criminal Proceeds takes effect next April. The photo-submission method previously used for identity verification, such as when opening a bank account, will be abolished, and financial institutions will be required to scan the IC chip on a My Number Card or driver’s license instead. Even so, this latest leak of driver’s license photo data is bound to leave users deeply uneasy.

Source: dailyshincho.jp / Original article here

What people said

4AnonymousOct 26, 2026 22:36
Is there anything we can do to cash in on this whole fuss?
47AnonymousOct 26, 2026 22:47
Re: #4
Bashing My Number to sabotage Japan.

This article is exactly that.
64AnonymousOct 26, 2026 22:53
Re: #4
Isn't it about making the My Number Card mandatory?
The ones who benefit most from this uproar are probably the Digital Agency, since they want to push the card anyway.
6AnonymousOct 26, 2026 22:36
A bit late to the party — it's been massively dangerous from day one.
15AnonymousOct 26, 2026 22:38
Re: #6
It's 100% safe — because it's entirely your own responsibility. The government takes zero blame, so it's 100% safe.
17AnonymousOct 26, 2026 22:38
It's not about whether the My Number Card itself is safe — if the backend server gets targeted, the data leaks regardless.
111AnonymousOct 26, 2026 23:10
Re: #91
Japan Hacker Association
https://www.hacker.or.jp
Re: #17
Make it more secure.
20AnonymousOct 26, 2026 22:39
Safe and secure — the caring My Number Card, for the ones you love.
22AnonymousOct 26, 2026 22:40
Speaking of which, are online banks even okay? Having your savings vanish without warning is no joke. I'm scared the banks will just play dumb and dodge responsibility too. Maybe it's better to just keep cash on hand.
29AnonymousOct 26, 2026 22:42
Re: #22
Who withdrew how much and when will get leaked too — here comes Kanekane Kinko (a money-obsessed bandit character from kids' anime, used here as slang for greedy scammers).
30AnonymousOct 26, 2026 22:43
Re: #22
Convert it all into cash and take it out of the bank. Then you can relax.
32AnonymousOct 26, 2026 22:43
Re: #22
Banks are fine. It's night and day compared to brokerages.
25AnonymousOct 26, 2026 22:42
The days of hanko stamps (personal name seals) and fax machines were better.
199AnonymousOct 26, 2026 23:57
Re: #25
The guy who got rid of hanko stamps and pushed the My Number Card was Taro Kono.
42AnonymousOct 26, 2026 22:47
It's been leaking for ages — but since the My Number Card is a national policy project, they just pressured the media into covering it up. Now it's finally gotten too big to hide.
98AnonymousOct 26, 2026 23:03
Re: #42
Delusions and wishful thinking don't count as sources.
51AnonymousOct 26, 2026 22:49
Is this the thread for the tech-illiterate who don't realize that even if the My Number — which is just a linking ID number — leaks, there's nothing anyone can actually do with it?
58AnonymousOct 26, 2026 22:51
Re: #51
It lets you merge personal data leaked from different companies into a single list.
70AnonymousOct 26, 2026 22:54
Re: #58
You're assuming they already have your address, name, and phone number stolen? lol
106AnonymousOct 26, 2026 23:07
Re: #58
That's exactly the kind of opening that leads to all sorts of damage. Besides, if you're going to say it doesn't matter even if it's stolen, then there was no point keeping the My Number itself confidential in the first place lol
59AnonymousOct 26, 2026 22:51
So from now on, the solid personal data that the state guarantees via My Number Card authentication is just going to get stolen by hackers.
75AnonymousOct 26, 2026 22:55
Re: #59
The government has already revised the law to basically scatter personal data around — medical history, mail-order purchase history, criminal records (including victim records), beliefs/creed, all attached with your name and address.
83AnonymousOct 26, 2026 22:58
Re: #75
Back at the start, everyone was making a huge fuss about medical histories and bank balances leaking, right?

Sure, if someone can hack a hospital's or bank's database, they could trace it back through your My Number to get info — but honestly, the moment that database gets hacked, it's already game over regardless.
68AnonymousOct 26, 2026 22:53
In November 2018, Yoshitaka Sakurada — the cybersecurity minister (also Olympics minister) at the time — told the Diet, "I don't use a computer myself" and "I'm not really sure what a USB is."

On October 6, 2026, Digital Minister Toshiharu Furukawa said at a post-cabinet press conference, "Protect your own information yourself."

These are the guys at the top lol. There's no way this is going to be fine lol
82AnonymousOct 26, 2026 22:58
Re: #68
That's a legendary Diet answer right there. Japan's cabinet ministers are basically amateurs rotated in on a shift system, so of course it ends up like this.
87AnonymousOct 26, 2026 23:00
Re: #68
Wasn't he the one who answered that he at least knew you stick it into a hole? The minister doesn't need to be an expert, but being below the national average is something else.
78AnonymousOct 26, 2026 22:57
There's no guarantee anywhere that the My Number Card is safe. Actually, hasn't the data probably already been stolen? The moment they used a Chinese company, it was already game over.
97AnonymousOct 26, 2026 23:03
Re: #78
Even if the My Number Card itself is super secure, the info some website verified using it can still get stolen.
85AnonymousOct 26, 2026 22:59
Don't worry about it — your personal info isn't worth more than about 5 yen anyway, so you'll be fine.
94AnonymousOct 26, 2026 23:02
Re: #85
Every little bit adds up, though.
95AnonymousOct 26, 2026 23:03
Japanese temp staffing agencies leak personal info like crazy anyway. Not sure what value there is in the personal data of bottom-rung temp workers, though.
105AnonymousOct 26, 2026 23:07
Re: #95
A few years back, when the restaurant industry stopped attracting bottom-rung workers, paper lists of those restaurant workers were being bought and sold. The reason you'd get a call the moment you quit one job was because of those lists.
148AnonymousOct 26, 2026 23:30
Isn't it weird how every attempt to make the world more convenient just makes it more inconvenient?
152AnonymousOct 26, 2026 23:32
Re: #148
Up until now it was premised on human-vs-human, but the moment AI capable of responding at superhuman speed showed up, humans already lost.
181AnonymousOct 26, 2026 23:51
Re: #148
It's because each service provider's idea of "convenient" is wildly different from everyone else's. Consumers getting hit with all of those, en masse and all at once, can't take it anymore — just look at the flood of umpteen different "Pay" apps and the lack of any standard for self-checkout machines.

Background and Key Points of This Debate

The core issue in the article is that the security of the My Number Card itself (the IC chip) and the security of the external databases linked to the card are two separate problems. The expert’s comment addresses the former, but most of the thread’s replies point to the risk of leaks from government and corporate databases — a mismatch that shows up again and again. The fact that identity verification will be unified around IC chip scanning once the revised anti-money-laundering law takes effect next April means the card will be presented far more often going forward, which is itself a factor suggesting a wider blast radius if a leak ever does occur. Meanwhile, some posters raised concerns by citing past cabinet ministers’ lack of IT knowledge, but that doesn’t actually serve as evidence about the technical security of the current system itself — it’s worth noting how easily the two threads of discussion get tangled together.

*This article is compiled as an excerpt/summary of the 5ch (News Flash+) thread “Cyberattacks on Japanese institutions are increasing, and people are starting to ask questions: “Is My Number Card information really safe?”“

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *