A 17-year-old was arrested in Osaka on December 4, 2025, under Japan’s Unauthorized Access Prohibition Act after using malicious code to extract personal data of over 7 million users from Kaikatsu Club, Japan’s largest internet cafe chain. The suspect stated he committed the hack to purchase Pokémon cards.
