Verified reported cyber incident context · Japan / JPCERT/CC
Cyber incident reports received by Japan’s JPCERT/CC
Market context — not industry-specific evidence
JPCERT/CC received 74,096 incident reports in fiscal year 2025, 61% more than the previous fiscal year’s 46,038 reports. From 1 January to 31 March 2026, it received 15,345 reports containing 10,262 incidents. These figures describe reports received by Japan’s coordination centre for incidents occurring domestically and overseas; they are not the percentage of Japanese businesses identifying or experiencing attacks, and they are not industry-specific findings for the sector shown on this page. The same quarterly report also shows 9,293 reported phishing sites, including 7,112 reports involving domestic brands, and highlights financial-related sites for domestic-brand phishing reports and e-commerce sites for overseas-brand phishing reports as leading spoofing contexts.
Increase in incident reports received
- Fiscal year 2025 compared with previous fiscal year
- 61%
- Unit
- percent
- Period
- Annual statistics for fiscal year 2025, together with quarterly category statistics for 2026-01-01 to 2026-03-31.
- Scope
- Incident reports and selected incident categories received by JPCERT/CC
Incident reports received by JPCERT/CC increased from 46,038 in the previous fiscal year to 74,096 in fiscal year 2025.
Official JPCERT/CC incident-report volume change only; this is not the percentage of Japanese businesses identifying or experiencing cyber attacks and not industry-specific evidence.
Selected reported incident categories
- Phishing sites
- 90.6%
- Unit
- percent
- Period
- Annual statistics for fiscal year 2025, together with quarterly category statistics for 2026-01-01 to 2026-03-31.
- Scope
- Incident reports and selected incident categories received by JPCERT/CC
- Scans seeking system weaknesses
- 1.5%
- Unit
- percent
- Period
- Annual statistics for fiscal year 2025, together with quarterly category statistics for 2026-01-01 to 2026-03-31.
- Scope
- Incident reports and selected incident categories received by JPCERT/CC
From 1 January to 31 March 2026, JPCERT/CC received 15,345 reports containing 10,262 incidents, including 9,293 phishing-site incidents and 156 scan incidents.
Direct reported-category context from JPCERT/CC only. These values are not Japanese-business incident rates and not sector-specific threat findings.
Reported phishing sites by brand context — counts
- All reported phishing sites
- 9,293
- Unit
- reported phishing sites
- Period
- Annual statistics for fiscal year 2025, together with quarterly category statistics for 2026-01-01 to 2026-03-31.
- Scope
- Incident reports and selected incident categories received by JPCERT/CC
- Domestic brands
- 7,112
- Unit
- reported phishing sites
- Period
- Annual statistics for fiscal year 2025, together with quarterly category statistics for 2026-01-01 to 2026-03-31.
- Scope
- Incident reports and selected incident categories received by JPCERT/CC
- Overseas brands
- 899
- Unit
- reported phishing sites
- Period
- Annual statistics for fiscal year 2025, together with quarterly category statistics for 2026-01-01 to 2026-03-31.
- Scope
- Incident reports and selected incident categories received by JPCERT/CC
- Unknown brand
- 1,282
- Unit
- reported phishing sites
- Period
- Annual statistics for fiscal year 2025, together with quarterly category statistics for 2026-01-01 to 2026-03-31.
- Scope
- Incident reports and selected incident categories received by JPCERT/CC
Selected phishing-brand category shares
- Financial sites among domestic-brand reports
- 69.1%
- Unit
- percent
- Period
- Annual statistics for fiscal year 2025, together with quarterly category statistics for 2026-01-01 to 2026-03-31.
- Scope
- Incident reports and selected incident categories received by JPCERT/CC
- E-commerce sites among overseas-brand reports
- 65.3%
- Unit
- percent
- Period
- Annual statistics for fiscal year 2025, together with quarterly category statistics for 2026-01-01 to 2026-03-31.
- Scope
- Incident reports and selected incident categories received by JPCERT/CC
JPCERT/CC phishing-brand reporting context only. Financial-site and e-commerce-site labels describe spoofed brand categories in reported phishing sites; they are not finance-sector or e-commerce-sector incident rates.
Source: JPCERT/CC, Quarterly Report, January–March 2026
Scope: Official JPCERT/CC reported-incident context. JPCERT/CC accepts incident reports concerning incidents occurring domestically and overseas and coordinates with relevant organisations where required. These figures describe report volume and selected reported-incident categories; they do not measure the percentage of Japanese businesses identifying or experiencing cyber attacks, do not establish incidents limited to Japanese organisations, and do not provide industry-specific performance, compliance, certification or security-outcome evidence.
Methodology: Official JPCERT/CC reported-incident context. JPCERT/CC accepts reports concerning computer-security incidents occurring domestically and overseas and coordinates with relevant organisations as Japan’s point of contact where coordination or support is required. In the source report, report count means the total number of reports submitted through forms or email; incident count means the number of incidents contained in those reports, with multiple reports relating to one incident treated as one incident; coordination count means cases in which JPCERT/CC requested investigation or problem resolution from site administrators or other relevant parties. The admitted indicators describe incident reports received by JPCERT/CC and selected reported-incident categories only. They do not measure the percentage of Japanese businesses identifying or experiencing cyber attacks, do not establish incidents limited to Japanese organisations, and do not provide industry-specific performance, compliance, certification or security-outcome evidence.
Accessible data table
| Metric | Value | Source | Scope | Reporting period |
|---|---|---|---|---|
| Fiscal year 2025 compared with previous fiscal year | 61% percent | JPCERT/CC, Quarterly Report, January–March 2026 | Incident reports and selected incident categories received by JPCERT/CC | Annual statistics for fiscal year 2025, together with quarterly category statistics for 2026-01-01 to 2026-03-31. |
| Phishing sites | 90.6% percent | JPCERT/CC, Quarterly Report, January–March 2026 | Incident reports and selected incident categories received by JPCERT/CC | Annual statistics for fiscal year 2025, together with quarterly category statistics for 2026-01-01 to 2026-03-31. |
| Scans seeking system weaknesses | 1.5% percent | JPCERT/CC, Quarterly Report, January–March 2026 | Incident reports and selected incident categories received by JPCERT/CC | Annual statistics for fiscal year 2025, together with quarterly category statistics for 2026-01-01 to 2026-03-31. |
| All reported phishing sites | 9,293 reported phishing sites | JPCERT/CC, Quarterly Report, January–March 2026 | Incident reports and selected incident categories received by JPCERT/CC | Annual statistics for fiscal year 2025, together with quarterly category statistics for 2026-01-01 to 2026-03-31. |
| Domestic brands | 7,112 reported phishing sites | JPCERT/CC, Quarterly Report, January–March 2026 | Incident reports and selected incident categories received by JPCERT/CC | Annual statistics for fiscal year 2025, together with quarterly category statistics for 2026-01-01 to 2026-03-31. |
| Overseas brands | 899 reported phishing sites | JPCERT/CC, Quarterly Report, January–March 2026 | Incident reports and selected incident categories received by JPCERT/CC | Annual statistics for fiscal year 2025, together with quarterly category statistics for 2026-01-01 to 2026-03-31. |
| Unknown brand | 1,282 reported phishing sites | JPCERT/CC, Quarterly Report, January–March 2026 | Incident reports and selected incident categories received by JPCERT/CC | Annual statistics for fiscal year 2025, together with quarterly category statistics for 2026-01-01 to 2026-03-31. |
| Financial sites among domestic-brand reports | 69.1% percent | JPCERT/CC, Quarterly Report, January–March 2026 | Incident reports and selected incident categories received by JPCERT/CC | Annual statistics for fiscal year 2025, together with quarterly category statistics for 2026-01-01 to 2026-03-31. |
| E-commerce sites among overseas-brand reports | 65.3% percent | JPCERT/CC, Quarterly Report, January–March 2026 | Incident reports and selected incident categories received by JPCERT/CC | Annual statistics for fiscal year 2025, together with quarterly category statistics for 2026-01-01 to 2026-03-31. |