Kaikatsu Club Data Breach: Teen Hacker Arrested in Osaka Over 7 Million Records

Osaka police detained a 17‑year‑old on Dec 4, 2025 under Japan’s Unauthorized Access Prohibition Act after he unleashed malicious code that siphoned personal data from Kaikatsu Club, the nation’s largest internet‑café chain. The breach exposed ↓ 7,000,000 user profiles, including names, phone numbers and login credentials.

Kaikatsu Club data breach highlights AI‑enabled hacking tools

The teen confessed that his sole motive was to fund a purchase of rare Pokémon cards, a claim that seems almost comical against the backdrop of a sophisticated intrusion. Cyber‑security analysts note that the code leveraged publicly available AI scripts to automate credential harvesting, a trend documented in recent Reuters reports.

“This is a textbook case of low‑skill actors exploiting high‑impact AI tools,” said a spokesperson for Japan’s National Police Agency.

Experts warn that the incident could spur stricter regulations on AI‑assisted cybercrime, echoing calls from the Bloomberg newsroom for tighter oversight of AI development environments.