Special Consultation Desk for Companies Affected by Unauthorized Access
Overview
The Information-technology Promotion Agency (IPA) Security Center’s “Special Website for Unauthorized Access Countermeasures” provides a consultation desk for companies and organizations that have suffered an incident or may have been affected. It also offers urgent inspection and countermeasure guidance; materials on cloud and website breaches and incident response; support programs; information on experts and service providers; educational materials; and seminar information. The special consultation desk advises on initial response and introduces specialist providers and consultation or reporting contacts. The website urges organizations to identify attack routes and targets, then define the scope of investigation in light of the possibility that systems may already have been breached.
Key points
- The special consultation desk for businesses affected by unauthorized access serves companies and organizations nationwide that are currently affected or may have been affected.
- For prevention, promptly inspect publicly accessible applications, external services in use, and data held, then proceed with follow-up countermeasures.
- The website brings together countermeasure guides, checklists, programs and support measures, expert information, educational materials, and seminars.
- The listed seminars are scheduled for October 29 and November 5, 2026.
Overview
A special website by the Information-technology Promotion Agency (IPA) Security Center that provides information on unauthorized access consultation, prevention and response materials, support measures, and related events.
Because attack methods vary, the site says organizations should identify the routes and targets used in growing attacks and, considering the possibility of an existing breach, define what to investigate based on whether it can be identified and investigated.
Details
The special consultation desk for businesses accepts inquiries by telephone (03-6759-5760) and email. Email responses may take until the next business day or later. Staff ask about the incident, advise on the possibility of damage and possible emergency measures, and introduce incident response specialists and other consultation or reporting contacts.
For incidents other than unauthorized access and general inquiries about routine preventive measures, the business and organization consultation desk provides email consultation. For responses and countermeasures related to personal information leaks, the Information Security Relief Desk provides telephone and email consultation.
The recommended prompt inspections include reviewing publicly accessible applications, identifying external services in use, and rechecking data held. The website then advises taking countermeasures for each area and points to the October 9, 2026 document “Countermeasures to Implement Promptly in Light of Incidents Involving Leaks Due to Unauthorized Access.”
The materials include information security guidelines for small and medium-sized enterprises, a self-assessment, and “Practice Navi,” which supports implementation of management guidelines. The cloud use guide organizes items to check when selecting a service and after starting to use it. Website materials cover how to build secure websites and operational management checkpoints. Incident materials introduce response procedures for leaks, virus and ransomware infections, and system outages, along with lessons learned by affected organizations.
Support measures include Cybersecurity Otasuketai Services, which bundle monitoring, on-site response, and insurance, and SECURITY ACTION, which offers two levels of goals through self-declaration. The SCS Evaluation System is scheduled to begin as a system for making supply chain security measures visible and assessing them. The site also lists support providers for small and medium-sized enterprises, services meeting quality standards, security education and training experts, tabletop exercise materials, and video learning materials.
Both scheduled seminars cover “Cybercrime and the SCS Evaluation System” and are also available online. The October 29 event will be held at the Fukuoka Chamber of Commerce and Industry, and the November 5 event at Apio Aomori; local organizations and IPA are co-hosting each.
Reference information includes alerts and other notices from the National Cybersecurity Office, the Ministry of Economy, Trade and Industry, the Financial Services Agency, the National Police Agency, the Personal Information Protection Commission, JPCERT/CC, and the National Institute of Information and Communications Technology.