A 15-year-old student in Japan has been arrested after allegedly using ChatGPT to help develop software that disrupted more than 46,000 user accounts on an anime streaming platform operated by Bandai Namco Filmworks. Authorities say the incident forced the company to suspend parts of its service while investigators examined the breach.
According to Japanese media reports cited by Cybernews, the teenager admitted writing the original source code himself but said he turned to ChatGPT to rewrite parts of the program into another programming language because the original version was too slow. Authorities allege the tool was then used to interfere with user accounts on Bandai Channel.
Investigators say the suspect also attempted to evade detection by repeatedly changing his IP address after the company’s security systems began blocking his activity. The teen reportedly told investigators he did not target the streaming service out of personal resentment, but because he believed it was relatively easy to access.
The attack reportedly prompted Bandai Namco Filmworks to temporarily freeze parts of the platform while it investigated the intrusion. The company previously disclosed that information associated with nearly 1.5 million accounts had been exposed, leading to a broader security investigation by Japanese authorities.
The case is the latest example of generative AI being linked to cybercrime investigations. Authorities have not alleged that ChatGPT carried out the attack itself. Instead, investigators claim the tool was used to assist with software development, highlighting how AI can accelerate coding tasks for both legitimate developers and malicious actors.
Security researchers have repeatedly warned that large language models can help attackers write code more quickly, explain programming concepts, or modify existing scripts. At the same time, researchers note that successful cyberattacks still require technical knowledge, planning, and human decision-making beyond what AI tools provide.
Bandai Namco Filmworks said it takes the incident seriously and is continuing efforts to strengthen its security controls to prevent similar attacks. The investigation remains ongoing, and Japanese authorities have not disclosed whether additional suspects or victims have been identified.