ThreatPaper

#japan

2 cases

Qilin ransomware operator extradited from Japan to Germany: what the record shows, and what it does not

A 28-year-old Russian, described as a Qilin core member, was arrested in Osaka in May 2026 and handed to Germany on 2 October over a September 2024 attack on a German logistics firm and a ~¥26M Bitcoin ransom. The case rests on investigative sources, not a published charging document.

Ransomware
Japan Digital Agency GSS breach: a known VPN flaw, a contractor account and 246,000 records on a zero-trust network

Japan's government-wide GSS platform was entered through a published, medium-rated VPN vulnerability the Digital Agency was still patching. A maintenance contractor's account read files holding up to 246,000 records of officials and suppliers. The agency's own Q&A and press transcript, read closely.

Data Breach