Ransomware attacks, which encrypt computer data and demand a ransom for its release, continue to pose a serious threat in Japan. Recent statistics from the National Police Agency indicate that in 2025, there were 226 reported incidents of ransomware attacks, an increase of four cases from the previous year. This growing sophistication of cyberattacks is resulting in significantly higher recovery costs for victims, affecting both businesses and the general population.

The report highlights that more than 60% of ransomware victims are small to medium-sized enterprises, while nearly 30% are large corporations. Among the various industries, manufacturing accounts for about 40% of the attacks, followed by wholesale and retail, service industries, and information and communications sectors. An overwhelming number of organizations report recovery times of less than one month, yet some still experience extensive delays, with certain entities taking over two months to restore operations. The financial implications of these attacks are severe, with over half of the responding organizations indicating recovery costs exceeded ¥10 million, and a handful reporting costs above ¥100 million.

Moreover, companies that took over two months to recover had all incurred costs exceeding ¥50 million, a stark contrast to previous surveys where a significant portion reported costs below that threshold. The consistent rise in both the frequency and complexity of ransomware attacks necessitates greater vigilance and investment in cybersecurity for organizations across Japan, as the repercussions extend beyond financial strain to affect overall societal wellbeing.