Weekday Japan business intelligence for finance professionals.

Join the list
Tokyo Brief東 京 ブ リ ー フ

Japan's day, wrapped and delivered by morning.

Article

LY Corporation's Data-Breach Reporting Duty to Regulators Finally Ends

Japan's communications ministry and privacy watchdog accepted LY Corporation's final report on fixes to its 2023 data breach, closing off a compliance obligation that outlasted the original disclosure by nearly three years, though the one-page filing says nothing about what the regulators actually checked.

Jul 21, 20262 min readLY Corporation4689
Illustration of a data-center security checkpoint with server racks and a status light switching from red to green, symbolizing a closed compliance review.

LY Corporation, the operator of the Line messaging app and Yahoo Japan's services, said the Ministry of Internal Affairs and Communications and the Personal Information Protection Commission have accepted its final progress report on the countermeasures it built after a 2023 unauthorized-access incident that leaked user data. The company submitted the report on July 15, 2026, nearly three years after it first disclosed the breach on November 27, 2023, in a notice it later updated in February 2024.

The disclosure itself is a single page. It does not say which specific recurrence-prevention measures the two regulators reviewed, what evidence satisfied them, or whether either body attached any conditions to acceptance. For that operational detail, LY Corporation points readers to a separate webpage summarizing its countermeasures rather than laying out the technical or governance specifics in the filing itself.

What the acceptance does confirm is narrower than it might sound: LY Corporation no longer carries an open reporting obligation tied to this particular breach. That is a regulatory-compliance milestone, not a verdict on whether the company has repaired user trust more broadly. The notice makes no claim beyond stating that the report was filed and received, and the company said only that it will continue working to restore confidence and keep its services usable safely for users and partners.