#Japan #Cybersecurity #Tokyo #Verizon #DBIR

Overview of the 2025 Data Breach Investigations Report

Verizon Business Group has unveiled the Japanese version of its 2025 Data Breach Investigations Report (DBIR), marking the 18th year of this significant cybersecurity analysis. This year's report provides insights from an unprecedented sample size, analyzing 22,052 security incidents across 139 countries, confirming 12,195 of these as data breaches. These figures represent the highest number of breaches analyzed in a single report.

Key Points from the 2025 DBIR

The report sheds light on notable cybersecurity trends:

Social Engineering Attacks

Social engineering incidents have decreased from 2021, accounting for only 20% of breaches in 2025. However, this decline is attributed to a surge in system intrusion attacks, which have become increasingly common.

Rise of Malware

The report highlights a significant increase in malware's role in data breaches, soaring from 58% last year to 83% this year. Email has emerged as a primary vector for distributing various types of malware, raising urgent concerns for businesses.

Ransomware Threats

Ransomware continues to be a major point of focus, constituting 51% of total breaches in the region. The media attention surrounding these incidents underscores their persistent threat, given that many attackers disclose their breaches publicly.

Cyber Trends in the Asia-Pacific Region

The report identifies that four out of five data breaches in the Asia-Pacific region are attributed to system intrusion attacks, a notable increase from the previous year’s 38%. Malware prevalence has also surged significantly, leading to an alarming rise in ransomware incidents. Notably, Japan's unique culture of strong group relations and long-standing partnerships highlight both the strength of collaboration and the need for vigilance due to increased third-party risks.

Ransomware Growth

In comparing data from 2024, ransomware incidents spiked by 37%. Ransomware was present in 44% of reviewed breaches, marking a dramatic rise from 32%. Small and medium-sized businesses (SMBs) are disproportionately affected, with ransomware incidents accounting for 88% of breaches in this sector. The average ransomware payment now stands at $115,000, a significant financial burden for many SMBs.

Emerging Risks from Generative AI

While generative AI (GenAI) has not yet fully proliferated, there are concerns about corporate data leaking into these AI platforms. As of early 2025, 15% of employees regularly access GenAI systems on company devices, exposing corporate secrets. Alarmingly, many of these employees use non-corporate email ids, highlighting a potential gap in corporate policy adherence.

Industry-Specific Trends

The 2025 DBIR underscores the necessity for sector-specific strategies in cybersecurity. For instance:

• - Manufacturing Industry: Incidents targeting espionage purposes have soared from 3% to 20%, showing an almost six-fold increase.
• - Healthcare Sector: This sector is also grappling with rising threats.
• - Retail Industry: Cyber incidents in this area have increased by 15%, with attackers shifting focus from payment data to easier targets like authentication credentials and internal documents.

Chris Novak, VP of Global Cybersecurity Solutions at Verizon Business Group, emphasizes the essential role of multi-layered defense strategies, calling for investments in robust security policies and employee training.

Robert Le Busque, VP for the Asia-Pacific region, echoes these sentiments, stressing the growing complexity and persistence of cyber threats organizations face, particularly in targeting critical infrastructure and third-party vulnerabilities.

Conclusion

The findings of Verizon's 2025 DBIR serve as a critical warning for organizations worldwide, underscoring the urgent need to bolster cybersecurity protocols, protect valuable assets, maintain customer trust, and ensure sustainable success in an increasingly digital landscape. For more detailed insights, the report is available at Verizon's official website.