Skip to content
Submit incident
AII-1000-80833
ConfirmedA court, a regulator or the organization itself has stated the core facts, or the record cites a court or regulator source.Supporting sources are pending verification.

Japan considers preemptive financial system shutdowns against AI-driven cyberattacks

Japan's banking industry warned that advanced AI systems capable of discovering software vulnerabilities could trigger concentrated cyberattacks on financial institutions, prompting consideration of preemptive shutdowns of ATMs and online banking services as a protective measure.

18 June 2026 Β· Security and cyberattacks
18 June 2026
AII-1000-80833
Quick facts
Category
Security and cyberattacks
Country
Japan
Date
18 June 2026
Drafted by
Raidu Incident Detection

What happened

On June 18, 2026, the head of Japan's All Banks Association stated that Japanese financial institutions may need to proactively shut down services such as ATMs and online banking to counter threats posed by advanced AI models like Anthropic's Claude Mythos.

The association head noted that frontier AI systems like Mythos can rapidly identify software vulnerabilities in banking systems, raising concerns about concentrated cyberattacks.

Reported impact

Financial institutions may be forced to suspend customer-facing services to protect assets and prevent cyberattack damage.

The potential service disruptions could affect consumers' access to banking services during times when protection measures are necessary.

Index analysis

The vulnerability identification capability of advanced AI models creates a new class of systemic risk to financial infrastructure that traditional security measures may not adequately address.

Banks are strengthening controls on access to such AI tools, and the U.S. government has restricted foreign access to Anthropic's latest models on national security grounds.

Governance controls

Japanese banks are reportedly strengthening checks and controls on access to advanced AI tools.

Financial institutions are considering preemptive service shutdowns as a contingency measure under emergency conditions, determined by individual bank management decisions.

Classification

Category
Security and cyberattacks
Industry
Financial and insurance services
Country
Japan
Harm status
Potential harm
Intent
Unknown
Timing
Unknown
Harm types
Economic or property, Public interest
Harmed
Consumers, General public

Sources and evidence

Sources not yet published

This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.

How sources are verifiedSuggest a source for this incident