The Information-technology Promotion Agency, Japan (IPA) announced its Top 10 Information Security Threats 2026 in January. For the first time, "cyber risks surrounding the use of AI" were included in the list of threats to organizations.

Anticipated risks include unintended information leaks and infringement of others' rights due to insufficient understanding of AI, problems arising from blindly accepting AI-processed and generated results without sufficient verification, and the ease and sophistication of cyberattacks due to the misuse of AI.

Meanwhile, in the list of threats to individuals, "fraudulent use of internet banking" had been absent from the list since 2023, but it has re-entered the list in 2026 after a four-year absence. This is thought to be a result of the recent situation regarding such incidents.