Skip to content
Submit incident
AII-1001-53429
AllegedThe record is a lawsuit, complaint or accusation that has not been decided.Supporting sources are pending verification.

Japanese teenager suspected of cyberattack using AI on internet cafe chain

A 17-year-old high school student from Osaka was sought by Japanese authorities on suspicion of using an AI-generated program to conduct a cyberattack on internet cafe and fitness gym operator Kaikatsu Frontier Inc. in January. The attack reportedly involved sending millions of unauthorized commands to breach the company's servers and extract customer data, potentially exposing personal information of approximately 7.3 million users.

January 2025 Β· Tokyo police Β· Security and cyberattacks
January 2025
AII-1001-53429
Quick facts
Category
Security and cyberattacks
Country
Japan
Date
January 2025
Drafted by
Raidu Incident Detection

What happened

A cyberattack on Kaikatsu Frontier Inc., which operates the Kaikatsu Club internet cafe chain and FiT24 fitness gyms, occurred in January. The 17-year-old high school student from Osaka is suspected of sending approximately 7.24 million unauthorized commands to the company's servers using a program generated by artificial intelligence in an attempt to extract personal data.

Reported impact

The company stated that the personal data of around 7.3 million customers may have been leaked as a result of the breach.

Index analysis

The case highlights the emerging threat of AI tools being weaponized for cybercrime, even by young individuals.

Classification

Category
Security and cyberattacks
Industry
Digital security
Country
Japan
Harm status
Potential harm
Intent
Intentional
Timing
Post-deployment
Harm types
Economic or property
Harmed
Business, Consumers
Failure modes
Data leak
Consequences
Police investigation
AI systems
AI-generated program

Sources and evidence

Sources not yet published

This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.

How sources are verifiedSuggest a source for this incident