Japan's Digital Agency says a vendor breach may have exposed personal data
Street-level view of Kioi Tower at Tokyo Garden Terrace Kioicho in Tokyo, with a colourful flower sculpture in the plaza in front of its entrance and two taxis passing on the road.Photo: 江戸村のとくぞう (Edomura no Tokuzo) / Wikimedia Commons, CC BY-SA 4.0
Japan's Digital Agency said on 22 October that data may have leaked after a third party accessed the cloud environment of Studio, whose service ran part of its website. The agency lists five categories of potentially affected contact-form submissions, each a maximum, together at most 13,323, including up to 3,661 enquiries about its vaccination certificate app, plus 35 staff or contractor accounts. The agency says the scope is being examined and no misuse has been confirmed. Aomori Prefecture said on 21 October that data on 206 event applicants, collected by its contractor on Studio, may have leaked.
The General Services Administration (GSA) has signed a OneGov agreement with US AI. Nextgov reports that US AI is a North Bethesda, Maryland, company and that it is GSA's first direct-to-government OneGov deal with an 8(a) certified small business. GSA's listing offers federal agencies up to 30 per cent off eligible software licences, plus two-week proof-of-value pilots for $1, on a FedRAMP High-authorised platform. GSA describes the offer as a limited-time offering that expires on 30 September 2028. The entry shows no signing date. GSA lists these terms under the US AI entry.
Governor Abigail Spanberger signed Executive Directive 6 on 23 October. It tells the Secretary of Public Safety and Homeland Security to set up a Cyber Consortium, which must adopt a statewide cyberattack prevention and response plan and an infrastructure-hardening plan that address AI-related risks. AI companies are to be asked to share with the Cyber Consortium the confidential briefings and reports they give other government bodies, including New York's Department of Financial Services under the RAISE Act and the European AI Office. The secretary is to aim for briefings on AI risks at least quarterly, and a tabletop exercise at least yearly. Other states will be invited to join.
Oman has launched the second phase of its National Digital Economy Programme, for 2026–2030, a release on the Foreign Ministry's website says. It focuses on digitalising strategic sectors, expanding e-commerce and electronic payments, and accelerating artificial intelligence adoption. The release gives its targets as a contribution of 1.5 billion Omani rials to gross domestic product (GDP), 300 million rials in technology investment and 3,000 new direct jobs a year. The programme's Strategic Intelligence Platform, built with the World Economic Forum, was also launched. An official survey cited in the release puts the digital economy at 9 per cent of GDP.
Peru's Presidency of the Council of Ministers (PCM), through its Secretariat of Government and Digital Transformation, has approved guidelines on the profile and duties of public entities' AI officer. The officer identifies uses for AI, drafts an AI action plan within the entity's digital government plan and oversees risk management, Andina reports. Candidates need a university degree, professional experience, AI knowledge and ethical suitability. The ministerial resolution that approved the National AI Strategy 2026-2030 requires public entities to designate the officer before drafting that plan. Luis Galarreta, President of the Council of Ministers, called the directive another milestone in modernising the state.
