Japan’s Aflac, KDDI, Sapporo, Nidec: Four Breaches, One Common Entry Point

Four separate cyber incidents reported in Japan during June 2026 reveal a common pattern of attackers gaining access through subsidiaries, overseas units, and shared third-party infrastructure rather than primary corporate networks: Aflac Japan exposed ~4.38M customer/agent records (including some bank details), KDDI’s shared email platform vulnerability may have impacted up to 14.22M accounts across ISPs, Sapporo reported suspected access at overseas subsidiaries, and Nidec’s Taiwanese unit suffered a BlackField ransomware attack claiming >2TB of stolen data and a $2M demand.