Teen Arrested in Japan for AI-Assisted Cyberattack on Bandai Channel Streaming Service Japanese authorities have arrested a 15-year-old high school student from Tokorozawa City, Saitama Prefecture, on charges of fraudulent obstruction of business after he allegedly used a ChatGPT-powered program to launch a large-scale cyberattack against Bandai Channel, a popular anime and tokusatsu streaming service operated by Bandai Namco Filmworks. The suspect, who was in his third year of junior high school as of November 2025, gained unauthorized access to the platform’s backend servers and systematically canceled the registrations of 46,812 user accounts, forcing mass withdrawals. The attack prompted Bandai Namco Filmworks to suspend all services temporarily while investigating the breach, cutting off access for its entire user base. According to police, the teenager developed a custom program using OpenAI’s ChatGPT to automate the intrusion and account deletions, demonstrating how generative AI is lowering the technical barrier for cyberattacks. The suspect, who began learning programming in fourth grade, reportedly had no personal grudge against the company, suggesting the attack may have been driven by technical curiosity or a desire to test capabilities rather than financial gain or targeted malice. During the breach, the attacker also harvested member data, including email addresses and nicknames. While Bandai Namco Filmworks stated there is no confirmed evidence of public data leaks or secondary fraud, the exposure of personally identifiable information (PII) remains a concern for affected users. The incident began in November 2025, when the company detected unauthorized access and unintended account removals, leading to a full service suspension. Services resumed in December 2025 after enhanced security measures were implemented. In a statement, the company pledged to strengthen its information security framework to prevent future incidents. The case highlights two growing cybersecurity risks: the increasing use of AI tools by threat actors, including minors, to develop exploitation scripts, and the vulnerability of streaming platforms to large-scale account takeover attacks. Even without confirmed data exfiltration, such incidents can disrupt business operations and force service outages, underscoring the need for robust authentication controls and behavioral monitoring.

Teen Arrested in Japan for Cyberattack on Anime Streaming Service Tokyo police have arrested a 15-year-old high school student suspected of launching a cyberattack against Bandai Channel, a popular subscription-based anime streaming platform. The unnamed teenager, from a city near Tokyo, allegedly exploited a server vulnerability to fraudulently cancel over 46,000 user subscriptions in November 2025. According to the Tokyo Metropolitan Police Department, the suspect identified the flaw by analyzing the service’s network traffic and used ChatGPT to develop a malicious program that automated the attacks. The fraudulent data sent to the company’s servers triggered mass account cancellations, forcing the platform to suspend operations for over a month while repairs were made and refunds issued. The boy was initially arrested in June 2025 for unauthorized access to another user’s account. Further investigation linked him to the broader attack, which he reportedly carried out by repeatedly changing his IP address after being blocked. Police stated he admitted to the allegations, claiming no personal motive only an interest in programming and network analysis. Bandai Channel, owned by a major Japanese entertainment company behind globally recognized video game franchises, had previously faced a 2022 cyberattack allegedly tied to the AlphV ransomware group, which may have exposed customer data. The latest incident highlights ongoing vulnerabilities in digital entertainment platforms.