Key facts
- Malware-infected USB drives were used on classified systems within Japan's Ground Self-Defense Force.
- The USB drives were brought in by personnel without proper procurement channels.
- The GSDF is reviewing its procurement procedures to prevent recurrence.
- The USB stick was used at the Middle Army headquarters since April 2024.
- The USB stick was registered and used for work related to the January 2024 Noto Peninsula earthquake.
USB flash drives infected with malware were used on classified systems within Japan's Ground Self-Defense Force (GSDF) after being brought in by personnel without going through proper procurement channels, officials said Tuesday. The GSDF is reviewing its procurement procedures to prevent a recurrence.
A Nikkei investigation revealed that the GSDF used USB drives containing a virus, said to be linked to Chinese hackers, on computers with access to classified information for nearly a year. The force elected not to disclose the matter even though similar memory sticks were widely available online.
The GSDF confirmed in February last year that malware was detected on a USB memory stick used at its Middle Army headquarters since April 2024. The USB stick had been registered and used by the headquarters for work related to the January 2024 Noto Peninsula earthquake. The GSDF manages officially procured USB drives and prohibits members from bringing in personal devices.