Japanese Teen Arrested for Canceling 46,812 Accounts via AI Exploit

• •A 15-year-old exploited a vulnerability in Bandai Channel, canceling 46,812 accounts.
• •The attack utilized a ChatGPT-generated script to automate account terminations.
• •Bandai Namco Filmworks faced significant financial losses and potential data exposure.

A 15-year-old student from Saitama Prefecture was arrested by Tokyo police for a cyberattack on Bandai Channel that resulted in the cancellation of 46,812 subscription accounts. The attack occurred on November 4, 2025, when the teenager exploited a backend vulnerability in the streaming service's system using a custom automation script generated with ChatGPT. The script sent false information to Bandai Namco Filmworks' servers, leading to unauthorized account terminations. The incident forced the company to suspend operations temporarily and incur significant financial losses estimated at JPY 50 million (approximately KES 40 million). Bandai Namco Filmworks later confirmed that the attack might have exposed personal data of up to 1.366 million users, although sensitive information like credit card numbers was not included. The service resumed in December 2025 after implementing security improvements. This incident highlights the growing threat posed by accessible AI tools in executing sophisticated cyberattacks.