Key facts
- Malware-infected USB drives were used on classified systems within Japan's Ground Self-Defense Force.
- The USB drives were brought in by personnel without proper procurement channels.
- The GSDF is reviewing its procurement procedures to prevent recurrence.
- The USB stick was used at the Middle Army headquarters since April 2024.
- The USB stick was registered and used for work related to the January 2024 Noto Peninsula earthquake.
USB flash drives infected with malware were used on classified systems within Japan's Ground Self-Defense Force (GSDF) after being brought in by personnel without going through proper procurement channels, officials said Tuesday. The GSDF is reviewing its procurement procedures to prevent a recurrence.
A Nikkei investigation revealed that the GSDF used USB drives containing a virus, said to be linked to Chinese hackers, on computers with access to classified information for nearly a year. The force elected not to disclose the matter even though similar memory sticks were widely available online.