IPA Urges Companies to Conduct Immediate Inspections and Countermeasures After Series of Unauthorized Accesses

The Information-technology Promotion Agency (IPA) on 2026-10-09 published the inspection items and countermeasures that companies and organizations should promptly implement, in response to a series of domestic information leaks caused by unauthorized access. The announcement is based on multiple intrusion incidents across a wide range of operators, including financial institutions and telecommunications providers.

IPA first asks organizations to identify applications exposed to the outside and cloud services in use, and to check for anomalies in operation and connection logs and for any suspicious accounts. It also requests that any unapplied patches be applied promptly, and instructs organizations to respond swiftly as a security incident if abnormalities or suspicious accounts are discovered.

Even if no anomalies are found during inspections, IPA calls for consideration of measures such as introducing multi-factor authentication, reviewing account privileges, reconsidering log retention periods, and encrypting data. IPA emphasizes the importance of rapid measures and ongoing responses, noting that stolen information is often abused, hinted at for public disclosure, or used in illicit sales, which can expand secondary damage.

Finally, IPA says that after conducting emergency inspections and countermeasures, organizations must continue measures under executive leadership that cover domestic and overseas offices, business partners, and contractors. It directs readers to refer to IPA's published materials for details.