Japanese authorities have arrested a 15-year-old student for allegedly orchestrating a cyberattack that led to the deletion of more than 46,000 user accounts on Bandai Channel, a popular anime streaming platform operated by Bandai Namco Filmworks. Investigators claim the teenager utilized ChatGPT to assist in developing the malicious code, causing significant service disruption.
ChatGPT's Role in the Cyberattack
According to Japanese media reports, the student is suspected of fraudulent obstruction of business. He reportedly exploited a security vulnerability within Bandai Channel in November 2025. Investigators allege the teen created a program that automated unauthorized access to member accounts, resulting in the cancellation of 46,812 subscriptions.
During questioning, the suspect admitted to using the AI chatbot. He stated, "I created the source code for the withdrawal process myself. Since the processing was taking a long time, I asked ChatGPT and completed it in a different programming language." This suggests ChatGPT was used to refine or accelerate the coding of the attack software.
Months of Disruption and Investigation
The alleged attack, which involved sending fraudulent commands to Bandai Channel's servers on November 4, 2025, caused the mass deregistration of user accounts. Services were severely disrupted from November 6, with full operations only resuming in December after extensive system repairs by Bandai Namco Filmworks. The company subsequently reported the incident to the police.
Authorities believe the teenager initially identified a platform vulnerability to gain unauthorized access. Even after Bandai Channel attempted to block his access, he allegedly changed his IP address approximately 30 times to continue sending malicious commands, prolonging the disruption.
Teen's Motive and Company Response
The suspect, who was a junior high school student at the time of the incident, had reportedly taught himself programming since elementary school. He had also been arrested in June of the current year for unrelated computer-related offenses. While admitting to the allegations, the teenager reportedly told investigators he held "no grudge" against Bandai Namco Filmworks, stating he targeted the platform simply because "there were many accounts I could log into." He added, "I happened to be able to access the information and had nothing against the company."
Following the breach, Bandai Namco Filmworks contacted all affected customers individually, advising them to be cautious of phishing and impersonation attempts. Users whose memberships were canceled were asked to re-register, and the company announced refunds for subscription fees charged during the service disruption. Bandai Namco Filmworks confirmed there was no evidence of leaked data being published online or misused, emphasizing their commitment to preventing future recurrences.