A Japanese research institute says weaknesses in smartphone apps may have helped open a path to cyberattacks on local companies, putting business servers and confidential information at risk.
The National Institute of Information and Communications Technology, part of Japan’s communications ministry, said attackers examined programs used by apps running on Google’s Android operating system. It also warned that apps for Apple devices could become targets. The findings link software used on phones with risks to the computer systems companies rely on to manage information.
The institute’s research team described attackers looking through app-related programs to find weaknesses in servers. After a flaw is identified, attackers may be able to make a server perform unintended operations or install malware, potentially exposing confidential information. The institute said it is difficult to stop malicious actors from discovering app vulnerabilities and stressed the importance of secure server design and operation.
An institute spokesperson said the wider spread of attacks could indicate that artificial intelligence is helping automate them. The spokesperson presented AI use as a possibility, not a confirmed explanation for the incidents.
Kyodo News reported that companies affected by data breaches included the firm operating Times Car, a vehicle-sharing service, East Japan Railway and Yamaha Motor. The dispatch also said travel agency H.I.S. reported a leak of customer passport details late in 2025.
Japan’s government urged businesses to improve security after recent reports described unauthorized access and information leaks, Kyodo News reported. The institute’s warning highlights the challenge for businesses: app weaknesses may be found by attackers, while secure servers can help protect the information those systems hold.
