Japan's Ministry of Health, Labour and Welfare met with medical institutions on May 22, 2024 [1], to discuss cyberattack risks from a new AI model.

The meeting underscores a critical vulnerability in national healthcare infrastructure as artificial intelligence evolves to identify system weaknesses and automate the creation of malicious software.

The discussions focused on the risks associated with the new AI, known as Claude Mythos. Officials said that this specific AI has the capability to detect system vulnerabilities and generate attack programs, which increases the threat level for medical information systems [1].

During the exchange, medical providers highlighted the practical impact of these threats. Some institutions reported that previous cyberattacks had already caused the temporary suspension of medical services [1]. These outages disrupt patient care and create risks to public safety.

Despite the urgency, healthcare providers expressed hurdles in implementing defenses. Representatives said there is a lack of financial resources and specialized technical personnel to secure their systems [1]. This gap suggests that while the government recognizes the threat, the frontline facilities lack the means to act.

Health Minister Ueno addressed these concerns by emphasizing the need for urgency. "The threat of cyberattacks will further increase," Ueno said [1]. He said that he intends to "quickly proceed with the necessary responses" [1].

The ministry is now tasked with bridging the gap between the theoretical risk of AI-driven attacks and the resource-depleted reality of hospital IT departments. The focus remains on ensuring that medical data and patient services remain operational, even as attack tools become more sophisticated through AI automation [1].

“"The threat of cyberattacks will further increase,"”

The emergence of AI models capable of automating vulnerability research marks a shift from manual hacking to scalable, algorithmic attacks. For Japan's healthcare sector, the admission that hospitals lack the funding and expertise to counter these tools suggests a systemic weakness that could lead to widespread service disruptions if the government does not provide direct financial and technical subsidies.