Japan Sees Near-Record Personal Data Breaches in Fiscal 2025 Japan reported 19,417 personal data breach cases in fiscal 2025, marking the second-highest annual total on record, according to a government report. The figure, just below the previous year’s 21,007 cases, reflects ongoing cybersecurity challenges across both public and private sectors. The Personal Information Protection Commission (PIPC) revealed that private-sector breaches declined to 17,139 from 19,056, while government agency incidents surged to a record 2,278 up from 1,951 in the prior year. The report, adopted by the cabinet on Tuesday, highlighted enforcement actions, including the PIPC’s first emergency administrative order in May 2024 against a name list broker accused of supplying personal data to fraud groups. In addition to the order, the commission issued 649 guidance or advisory measures and two formal recommendations. Digital Transformation and Cybersecurity Minister Hisashi Matsumoto noted that many breaches stemmed from human error, such as hospitals and pharmacies sending documents to incorrect recipients or companies misdirecting sensitive items like credit cards. The findings underscore persistent vulnerabilities in data handling, particularly as government agencies face rising breach incidents. Authorities have pledged to monitor preventive measures and maintain enforcement actions.