--- title: "Cyberattack on cloud provider Arcadia may expos… | Firevault" url: https://fire-vault.com/news/arcadia-cyberattack-japan-police-data-breach-2026 description: "A cyberattack on Osaka-based cloud provider Arcadia may have exposed names and email addresses of about 125,000 officers and staff across 20 Japanese…" lang: en-GB --- Breaking News Updated as information becomes available News · Breach Analysis · Breaking # Cyberattack on cloud provider Arcadia may expose data of 125,000 Japanese police officers and staff A cyberattack on Osaka-based cloud provider Arcadia may have exposed names and email addresses of about 125,000 officers and staff across 20 Japanese prefectural police forces, plus more than 18,000 addresses registered for crime alerts. **Mark Fermor**CTO, CMO and Founder, Firevault Published 21 October 2026 · 3 min read Share LinkedIn (https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Ffire-vault.com%2Fnews%2Farcadia-cyberattack-japan-police-data-breach-2026)Email A Japanese police box at night on a wet street, with a smartphone showing an email notification on a bench ## What happened Personal information belonging to about 125,000 officers and staff members at 20 prefectural police forces in Japan may have been compromised in a cyberattack on cloud service provider Arcadia, according to sources at the National Police Agency (NPA) cited by Jiji Press and The Japan Times on 21 October 2026. The 20 forces, including those in Aichi, Hyogo and Hiroshima prefectures, had outsourced to Arcadia, which is based in Minoh, Osaka Prefecture, a system used during emergencies such as natural disasters to check whether personnel were safe and able to report for duty. ## What data may be affected - **Names and email addresses** registered with the emergency safety check system. Because the system was built for emergency contact, most addresses are believed to be personal accounts used on private mobile phones. - **Department details** for some forces, including Tochigi and Saitama, which had also recorded which department employees work in. - **Crime alert subscribers.** Four forces, including Shimane and Yamaguchi, also used Arcadia to send crime alerts. Those systems held the names and email addresses of about 16,000 individuals and more than 2,600 email addresses of companies and other organisations. Kyoto and Fukuoka prefectural police used both systems. ## The response so far No misuse of the information for fraud or other crimes has been confirmed, the sources said. The NPA has told affected forces to gather information, warn people about the risk of further harm and arrange alternative ways of contacting personnel in an emergency. The attack has also raised concern about possible exposure at other Arcadia customers, including local governments and fire departments across Japan. ## Why this matters This is a supplier incident, not a breach of police networks themselves. One provider serving many public bodies became a single point of exposure for all of them. The data involved is also sensitive in context: personal contact details for police personnel can be used for targeted phishing or harassment. There is a second consequence. An emergency contact system that cannot be trusted has to be replaced at short notice, which is exactly what the NPA has now asked forces to do. ## Points for organisations to consider - Know which suppliers hold your staff and customer data, and what each one holds. - Keep contact lists and other records you would need during an incident available in a copy you control, outside the supplier's environment. - Plan an alternative way to reach people if a hosted communication service is unavailable or compromised. Offline Secure Storage (https://fire-vault.com/offline-secure-storage)® from Firevault keeps a dedicated copy of critical records physically disconnected by default, reachable only through an authorised, identity-verified session. It does not prevent a supplier being attacked, but it means the copy you depend on is not sitting on a permanently connected network. _Source: The Japan Times, translated from Jiji Press, "Data breach (https://fire-vault.com/learn/breaches) potentially exposes information of 125,000 police officers and staff", 21 October 2026. Details are attributed to NPA sources and have not been independently confirmed by Firevault._ ## Questions About 125,000 officers and staff across 20 prefectural police forces, plus about 16,000 individuals and more than 2,600 organisations registered for crime alerts, according to NPA sources. Mainly names and email addresses, many of them personal accounts, and for some forces the department in which employees work. No misuse had been confirmed as of 21 October 2026, according to the NPA sources cited. ## Sources and reporting notes 1. japantimes.co.jp (https://www.japantimes.co.jp/news/2026/10/21/japan/crime-legal/arcadia-police-data-leak/)Primary reporting referenced in this analysis. Incident facts are attributed to the named sources; the recommendations and product discussion are Firevault analysis by Mark Fermor. About the author **Mark Fermor** CTO, CMO and Founder of Firevault. Mark writes on physical control, offline storage and the incidents that show why both matter. ## More breach analysis - Breach Analysis · 21 Oct 2026**State Bank of India confirms data loss after 3,897 customer records found on the dark web**_Read the analysis_: https://fire-vault.com/news/sbi-confirms-data-breach-customer-records-dark-web-2026 - Breach Analysis · 15 Oct 2026**EY data breach: client tax records exposed through a support platform**_Read the analysis_: https://fire-vault.com/news/ey-data-breach-client-tax-records-october-2026 - Breach Analysis · 12 Oct 2026**ASOS data breach: stolen customer profiles and a hijacked app notification**_Read the analysis_: https://fire-vault.com/news/asos-data-breach-customer-profiles-october-2026 - Breach Analysis · 25 Sept 2026**Dyfed-Powys Police confirms cyber attack as staff information may have been compromised**_Read the analysis_: https://fire-vault.com/news/dyfed-powys-police-cyber-attack-2026 - Breach Analysis · 22 Sept 2026**FBI investigates claims that hackers stole personnel and applicant data**_Read the analysis_: https://fire-vault.com/news/fbi-employee-applicant-data-breach-shinyhunters-2026 - Breach Analysis · 20 Sept 2026**Vulnerable children's health records caught up in HCRG Care Group cyber attack, families told 18 months later**_Read the analysis_: https://fire-vault.com/news/hcrg-care-group-children-records-cyber-attack-2026 Back to the Knowledge Vault: https://fire-vault.com/learn/knowledge Why #OSS ### Keep a clean copy out of reach. Offline Secure Storage® keeps one copy physically disconnected at the hardware level between sessions. Why #OSS: https://fire-vault.com/why-oss Control ### Govern the paths attackers depend on. Physical, out-of-band control of selected network paths, composed into ten Blueprints. Explore Control: https://fire-vault.com/control Image: Vault (https://fire-vault.com/__l5e/assets-v1/b9413e6e-5b45-442d-ab80-67cf0c578ba6/oss-approved-vault.png) Ready to start? ### Create your Vault online. Business Vaults from £360 a month inc VAT, on a 36-month commitment. Get started: https://fire-vault.com/get-started Book a demo: https://fire-vault.com/demo ## Structured data ```json [ { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Firevault is a UK cyber resilience company. Data protection and storage through Offline Secure Storage. Network evolution and rapid protection through Control.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": [ "GB", "EU", "US", "AE" ] }, { "@type": "ContactPoint", "contactType": "sales", "email": "sales@fire-vault.com", "availableLanguage": "English", "areaServed": [ "GB", "EU", "US", "AE" ] } ], "founder": [ { "@type": "Person", "name": "Mark Fermor", "jobTitle": "Founder, CTO and CMO" }, { "@type": "Person", "name": "David Bailey", "jobTitle": "Founder and CEO" } ], "areaServed": [ "United Kingdom", "Europe", "United States", "Middle East" ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "brand": [ { "@type": "Brand", "name": "Offline Secure Storage" }, { "@type": "Brand", "name": "Control by Firevault" }, { "@type": "Brand", "name": "Firebreak" } ], "knowsAbout": [ "Offline Secure Storage", "Physically disconnected data storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Ransomware recovery", "3-2-1-1-0 backup rule", "AI kill switch", "Operational technology security", "Critical national infrastructure resilience", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance", "DORA Compliance", "NCSC Cyber Assessment Framework" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Firevault is a UK cyber resilience company. Data protection and storage through Offline Secure Storage. Network evolution and rapid protection through Control.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/news/arcadia-cyberattack-japan-police-data-breach-2026#webpage", "url": "https://fire-vault.com/news/arcadia-cyberattack-japan-police-data-breach-2026", "name": "Cyberattack on cloud provider Arcadia may expos…", "description": "A cyberattack on Osaka-based cloud provider Arcadia may have exposed names and email addresses of about 125,000 officers and staff across 20 Japanese…", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/arcadia-japan-police-data-breach-2026.jpg" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/news/arcadia-cyberattack-japan-police-data-breach-2026#breadcrumb" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/news/arcadia-cyberattack-japan-police-data-breach-2026#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "Learn", "item": "https://fire-vault.com/learn" }, { "@type": "ListItem", "position": 3, "name": "Knowledge Vault", "item": "https://fire-vault.com/learn/knowledge" }, { "@type": "ListItem", "position": 4, "name": "Cyberattack on cloud provider Arcadia may expose data of 125,000 Japanese police officers and staff", "item": "https://fire-vault.com/news/arcadia-cyberattack-japan-police-data-breach-2026" } ] }, { "@context": "https://schema.org", "@type": "NewsArticle", "headline": "Cyberattack on cloud provider Arcadia may expose data of 125,000 Japanese police officers and staff", "description": "A cyberattack on Osaka-based cloud provider Arcadia may have exposed names and email addresses of about 125,000 officers and staff across 20 Japanese prefectural police forces, plus more than 18,000 addresses registered for crime alerts.", "url": "https://fire-vault.com/news/arcadia-cyberattack-japan-police-data-breach-2026", "image": [ { "@type": "ImageObject", "url": "https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/arcadia-japan-police-data-breach-2026.jpg", "width": 1200, "height": 1200 }, { "@type": "ImageObject", "url": "https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/arcadia-japan-police-data-breach-2026.jpg", "width": 1200, "height": 900 }, { "@type": "ImageObject", "url": "https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/arcadia-japan-police-data-breach-2026.jpg", "width": 1200, "height": 675 } ], "thumbnailUrl": "https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/arcadia-japan-police-data-breach-2026.jpg", "author": { "@type": "Person", "name": "Mark Fermor", "jobTitle": "CTO, CMO & Founder", "worksFor": { "@id": "https://fire-vault.com/#organization" }, "url": "https://fire-vault.com/why-oss/about" }, "publisher": { "@type": "NewsMediaOrganization", "name": "Firevault", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 600, "height": 60 } }, "datePublished": "2026-10-21T00:00:00+00:00", "dateModified": "2026-10-21T08:38:37.191531+00:00", "mainEntityOfPage": { "@type": "WebPage", "@id": "https://fire-vault.com/news/arcadia-cyberattack-japan-police-data-breach-2026" }, "inLanguage": "en-GB", "articleSection": "Breach Analysis", "wordCount": 501, "keywords": "Cyberattack, Breach Analysis, data breach, cyber security, offline secure storage, data protection, physical air gap", "articleBody": "## What happened Personal information belonging to about 125,000 officers and staff members at 20 prefectural police forces in Japan may have been compromised in a cyberattack on cloud service provider Arcadia, according to sources at the National Police Agency (NPA) cited by Jiji Press and The Japan Times on 21 October 2026. The 20 forces, including those in Aichi, Hyogo and Hiroshima prefectures", "dateline": "United Kingdom", "speakable": { "@type": "SpeakableSpecification", "cssSelector": [ "h1", ".article-summary", "h2" ] }, "isAccessibleForFree": true, "copyrightHolder": { "@id": "https://fire-vault.com/#organization" }, "copyrightYear": 2026 }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "How many people may be affected by the Arcadia cyberattack?", "acceptedAnswer": { "@type": "Answer", "text": "About 125,000 officers and staff across 20 prefectural police forces, plus about 16,000 individuals and more than 2,600 organisations registered for crime alerts, according to NPA sources." } }, { "@type": "Question", "name": "What information may have been exposed?", "acceptedAnswer": { "@type": "Answer", "text": "Mainly names and email addresses, many of them personal accounts, and for some forces the department in which employees work." } }, { "@type": "Question", "name": "Has the data been misused?", "acceptedAnswer": { "@type": "Answer", "text": "No misuse had been confirmed as of 21 October 2026, according to the NPA sources cited." } } ] } ] ```