SHINDO1

Japan Ground Self-Defense Force

Ministry of Defense

Personal data6files

NO LEAK FOUNDInternal documentsMalware infection · Closed (final report)

Open in the live monitor ▶
Disclosed
Jun 26, 2026
Detected
Feb 5, 2025
Detection to disclosure
506 days
Leak
No leak
Type
Malware infection
Status
Closed (final report)
Security spend
Not checked yet
Compensation
Not announced

What leaked

System & internalNo information leaked

How many

  • USB memory sticks found with malware (units) 6 files

Who is affected

  • Ground Self-Defense Force (Middle Army headquarters)

Cause

Counterfeit Chinese-made USB sticks brought in by personnel without proper procedures contained malware. The source could not be traced, and virus checks at inspection did not work

Timeline

  1. USB sticks began to be used
  2. Detected
  3. Announced at the Defense Minister's press conference (Nikkei reported the day before)
  4. Ground Staff chief's press conference announced findings (brought in by personnel)

Response

  • New detection
  • Vendor review
  • Governance / committee

Strict virus checks when using USB devices; checks on the procurement process; recording sources in a register; reducing USB use and building information systems

What you should do

  1. Expect targeted phishing posing as HR or interview contacts
  2. Check the company's notice to see if you're affected

Lessons for companies

  1. Put security requirements, audit rights and reporting deadlines in vendor contracts
  2. Never sit on a known defect. Test every change before production
  3. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  4. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources