Ransomware incidents in Japan during the first half of 2025
Summary: Cisco Talos recorded 68 ransomware cases affecting organizations in Japan from January 1 to June 30, 2025, up from 48 in the same period last year, an approximately 1.4-fold increase, with monthly incidents ranging from 4 to 16. Manufacturing accounted for 18.2% of cases, organizations with capital under ¥100 million made up 38%, and Qilin emerged as the most active group with eight confirmed victims after LockBit and 8base ceased activity following law enforcement takedowns.
What you should know: Organizations with capital under ¥1 billion made up 69% of all cases, and Qilin went from no reported damage in Japan in FY2024 to eight confirmed victims in the first half of FY2025, with a new group, Kawa4096, targeting Japan from its first day of operations in late June 2025.
Read the original at Cisco Talos ↗
- Topics
- Ransomware
- Related
- Ransomware Defense Using the Wazuh Open Source Platform Cyber Risks ·