Written from Tokyo by Matt Ketchum 124 articles

Japan SME digital infrastructure field notes.

Use the writing for context. If you are making a software, workflow, or operating-system decision, start with one of the decision paths.

Start with the reading path →
  1. Business in Japan

    Why Japan Inc. punishes criticism and pays for silence

    When criticism threatens a job or contract, silence can pay. How hierarchy and management culture in Japan make honest advice commercially dangerous.

  2. cybersecurity

    Muji data breach: the card numbers that should have been deleted

    Muji may have exposed 1.09 million full card numbers it should have deleted. What failed, where Stripe helps, and what businesses in Japan should change.

  3. cybersecurity

    Japan cyberattack tracker update: what 1,435 public notices show so far

    My Japan cyberattack tracker now holds 1,435 incidents disclosed from 1 June to 10 November 2026. As the record grows, the patterns are getting clearer.

Find the issue behind the symptom

Practical notes for running and modernizing a business in Japan.

Browse the common patterns we see in real work with owners, operators, and local teams: messy records, unclear responsibility, software that never quite sticks, and valuable opportunities that stay hidden because the right people cannot find them.

  1. Path 01

    Infrastructure mindset

    Why MKUltraman works on invisible systems, not just websites.

    Start here if you are trying to understand the operator thesis: Japan hides value in fragile, under documented, locally specific systems.

  2. Path 02

    SME stack cleanup

    When the tool problem is really an ownership problem.

    For founders and managers with SaaS sprawl, fragile spreadsheets, undocumented automations, or a CRM nobody fully trusts.

  3. Path 03

    Japan-fit software decisions

    Choose tools around adoption, not vendor theater.

    Practical comparisons and stack design for Japan teams where language, handoffs, accounting, and vendor reality matter.

  4. Path 04

    Analog data archaeology

    Find the map before optimizing the route.

    For akiya, local industries, tourism assets, food producers, and overlooked niches where the official data layer is weak.

All articles

124
Not every outage is an attack. Your plan should work either way. ATMs went dark at 128 of Japan's 254 shinkin banks (50.4%). Phones screamed a magnitude 9.9 warning for a giant quake that never arrived. It looked like an attack. It wasn't. Then Microsoft 365 failed for half a day, and that wasn't an attack either. Why Japan Inc. punishes criticism and pays for silence When criticism threatens a job or contract, silence can pay. How hierarchy and management culture in Japan make honest advice commercially dangerous. Muji data breach: the card numbers that should have been deleted Muji may have exposed 1.09 million full card numbers it should have deleted. What failed, where Stripe helps, and what businesses in Japan should change. Japan cyberattack tracker update: what 1,435 public notices show so far My Japan cyberattack tracker now holds 1,435 incidents disclosed from 1 June to 10 November 2026. As the record grows, the patterns are getting clearer. Japan Is Right to Act on Data Leaks. Blocking Won't Get It There. Japan's ministry will study blocking sites that publish leaked data. Blocking can't reach dark web leak sites or reposts. Fixing systems before data is stolen can. Gennai's open-source AI apps: a code review Japan's Digital Agency published part of its Gennai AI platform as open source. The foundations are sound, but the legal app can cite the wrong law and the templates fail their own setup guides. Gennai's 110 minutes: what the staff survey actually measured The Digital Agency says Gennai saves government staff 110 minutes a week. The figure is real, but it covers fewer people and less certainty than the headlines suggest. Arara Message breach: 77 million email addresses and a hijacked email service What happened in the Arara Message breach, how attackers used the real email service to send scams, and what business owners should check about their providers. Six weeks, 553 incidents: Japan's breach wave runs through vendors The Japan Cybersecurity Tracker's first six weeks: 54% of disclosed incidents came through a vendor, and each vendor's customer list decided where the victims were. A Show Listing Is Part of Your Customer's Operating System A live-music ticket page has to explain the whole night, not just the headline price. A practical lesson from Kaala's Japan field guides for any business publishing prices and schedules. Don't wait for the government. Fix the flaws before AI finds them. Japan's answer to the breach wave is AI, active cyber defense, and an emergency package still being written. Fix your own flaws before attackers' AI finds them. GMO's own hackers saw it coming. The fix wasn't fast enough. GMO's own ethical hackers flagged its FX cloud service before attackers used stored broker passwords to drain accounts. What the delay teaches. How I turned a town's Japanese event calendar into a bilingual one that updates itself A build case study from Yugawara Club: a daily job that reads the official event listings, keeps an archive, flags what needs English copy, and fails safely when the source goes down. The front door held. They came in through the vendor's back office. Attackers placed trades in IwaiCosmo Securities customer accounts without stealing a single password. They went through a misconfigured admin function at Trade Works, the vendor that runs the trading system. Japan asks for security. Nobody has to do it. PHP2Shell, DMARC, and the 2025 digital cliff: three times Japan's government asked for basic security work, and three times most organizations didn't do it. PHP2Shell: the patch is out. Do you know who installs it? PHP has fixed two critical flaws that let strangers take over websites. Roughly half of PHP sites run versions that get no official fix. Who updates yours? Whom Now Shall We Trust? After the Arcadia breach, a real Japanese disaster-alert system sent 1.42 million phishing emails and police contact lists leaked. What that does to trust in authorities, and how to protect yourself. October 17 was the day Japan's technical debt came due SoftBank, Carsensor, 2nd STREET and GEO all went dark on one day. Shutting everything down is what technical debt leaves you with when attackers arrive. Commune data breach: one community platform, 29 organizations exposed A flaw in Commune, the community SaaS behind fan sites for Suzuki, Mazda, Panasonic and LINE Yahoo, exposed about 307,000 members. What to ask your vendors. Everyone can see it. Only attackers act on it. Japan's company security signals are public and legal to read. Fear of the law keeps the people who notice quiet. Attackers have no such problem. Studio.Design breach: your website builder held your keys The Studio breach exposed form data, API keys, and the key to decrypt them. What it means for Japanese companies on no-code website builders, and what to do. Doing something isn't the same as fixing it Yoshinoya blocked foreign IPs. Times Car users reissued licences. Fixes chosen without understanding the breach change nothing, but feel like they do. Nobody had to hack Japan's earthquake warning A false M9.9 warning was cancelled after eight minutes, and Japan asked if it had been hacked. The breach wave has made distrust the reflex. Why that matters. The PC left in a Kobe hotel room Two people hid a computer on a Kobe hotel's Wi-Fi and sent phishing mail through it. The gap was monitoring, and hotels, offices, and shared spaces can close it. Quoted in The Japan Times on Japan's phishing kit crackdown The National Police Agency took down 34 domains selling phishing kits. I told The Japan Times not to wait. Encrypted DNS, passkeys, and a harder rule for links. Selling other people's products in Japan without becoming the merchant How I built Wild Food Japan's bilingual shop across 17 producer stores on five platforms, and what it teaches any business that sells through partners in Japan. Sovereign AI, made elsewhere Japan says it wants AI sovereignty. When the breach wave hit, its digital minister called Anthropic. What that says about the system Japan runs on. You outsourced the work, not the responsibility Japan's 2026 breach wave keeps running through vendors. Why the companies that hired them still own the result, and what to check this week. Blood in the water: Japan's neglected basics are visible from a mile away Japan's 2026 breach wave lands in an environment of neglected basics anyone can see. Why that neglect does triple damage, and why the fixes are easy. Japan cyberattacks in 2026: what the breach wave reveals Lawson, Times Car, Skyticket, and IDCF Cloud exposed different failures in application access, data retention, supplier dependence, monitoring, and recovery. What functional cybersecurity control looks like in Japan Policies, vendors, and certificates are not control. How organizations of any size can prove they know their stack, limit authority, and recover from failure. Japan's data breaches: a cyberattack is not an explanation Japanese breach notices describe what attackers did and leave the institutional failure buried. Why victimhood does not end the question of custodianship. The 99.7% problem: Japan's SME cybersecurity exposure SMEs are 99.7 percent of Japanese businesses. What visible breaches at large companies imply for the much larger, less visible small-business attack surface. Reskilling staff in Japan: subsidies, planning and payoff How Japanese SMEs can reskill staff: tie training to a real task, use the MHLW reskilling subsidy while it runs, and give people room to change the work. Mac clipboard history, and using the tools you already own How to open clipboard history on a Mac with macOS Tahoe, what to watch for with sensitive data, and why small businesses should use what they already pay for first. Why AI adoption stalls in Japanese SMEs, and what to fix first Most small Japanese businesses need clear workflows, owned accounts and tidy data before ChatGPT, Copilot or Gemini can help. Here is what to fix first. What 851 unattended bot runs taught me about automation An audit of a paper trading bot after 851 scheduled runs found timeouts, ledger drift and weak exits. How to check an automation or AI workflow the same way. Digital asset ownership: a continuity checklist for Japan SMEs Domains, DNS, email, logins and recovery details are business assets. How Japanese companies lose control of them, and a checklist to make them recoverable. How to Find Live Music in Japan Without an Insider Map A practical guide to finding live music in Japan: why shows are hard to find, what to search for in English and Japanese, and what better event pages need to answer. Why Japan's Local Scenes Need Better Event Discovery Japan's local scenes are full of value, but event information is fragmented. Clearer public listings help venues, artists, travelers, residents and small cultural communities. Music in Japan Needs Better Paths to Discovery Why I built Music in Japan: the country's live music is scattered across venue feeds and flyers, and clearer public paths help artists, venues, fans and visitors. Why akiya in Japan are hard to buy: the information problem Japan's empty houses are plentiful, but the information needed to act on one is scattered and local. Why akiya are an information problem before a price story. The hidden cost of good enough systems in Japanese SMEs Spreadsheets, shared folders and one person's memory look cheap until hiring, succession, a sale or AI exposes them. How to find and fix key-person risk. The real Japanese SME stack: LINE, Excel, fax and one person Many small businesses in Japan actually run on LINE, Excel, fax, shared logins and one person who knows everything. How to map that real stack and make it safe. Why DX projects in Japan fail before the software arrives Most failed DX projects in Japanese companies go wrong before a tool is chosen, because workflow, data, ownership and vendor terms were never mapped. Why good Japanese businesses are hard to find, trust and buy from Japan does not lack innovation. It lacks interfaces: websites, booking, data and processes that let customers find, trust and act. How to fix yours. What can you do with abandoned buildings in Japan? Akiya as data Notes from my Unpacking Japan conversation on abandoned Japanese buildings: why akiya are a data and trust problem first, and why use matters more than price. What the 2011 tsunami taught me about business continuity I was in Miyako, Iwate in March 2011. What that taught me about business continuity for systems in Japan, and how a small business can prepare. Daikin, Elliott, and the Japan Inc. value gap Elliott's campaign at Daikin asks whether one of Japan's best companies can match its engineering with capital discipline. What the case says about Japan Inc. Earthen Wall Workshop in Yugawara: Bamboo, Clay, and Real Craft A record of the May 23, 2026 Akiyaz earthen wall workshop in Yugawara, where participants worked on the bamboo lattice that sits inside traditional Japanese mud walls. Norikura Kogen onsen ryokan: creating value from what exists A four-building onsen ryokan in Norikura Kogen shows how existing real estate in Japan creates value through due diligence, onsen rights, operations and a strong location. How to move a Japanese business off fax: a practical guide A step-by-step guide to replacing fax in a Japanese business: internet fax, e-invoicing, electronic bookkeeping rules, e-contracts and customers who still fax. When should a small business stop managing its own IT? A 10-point checklist for small businesses in Japan to judge when do-it-yourself IT has become a risk, and what kind of outside help fits the problem. Why CRM rollouts fail at Japanese SMEs, and what works CRM projects at small Japanese businesses usually fail before the software matters. How to choose a CRM, set it up simply and get your team to use it. Notion vs Backlog vs Linear: which suits a team in Japan? Notion, Backlog and Linear compared for teams in Japan: Japanese support, documentation, developer workflow and which to choose for mixed or bilingual teams. How to cut overlapping SaaS subscriptions in a Japan SME A practical way for small businesses in Japan to find unused and overlapping software subscriptions, handle annual contracts and cancel without breaking work. Fractional CTO or technology advisor in Japan: what SMEs need What a fractional CTO or part-time technology advisor does for a small business in Japan, how it differs from managed IT or an SIer, and how to scope it well. Japan's labor shortage is also a work-design problem Japan will not hire its way out of the labor shortage. Small businesses can protect themselves by removing duplicate work, fixing clerical processes and making each role easier to learn. Japanese leadership culture and the price of wa Wa, or harmony, keeps Japanese organizations stable and makes decisive leadership rare. Where the habit comes from, and how companies can make room for people to speak up. How to buy business software in Japan without vendor lock-in Why technology purchases in Japanese companies stall after procurement, how SIer dependence forms, and the contract and ownership steps that keep you in charge. Dual pricing in Japan: resident discounts vs tourist surcharges Japan's dual pricing debate turns on design. Why a resident discount with clear ID rules works where a foreigner surcharge fails, and how a business can run one. Shared accounts and logins in a small business: who owns what Shared logins, drives, inboxes and chat only work with shared rules. How small businesses in Japan can set owners, access and records for the tools everyone uses. Turning a business decision into working practice in Japan Part 1 of a series on Japan in 2026. Agreement in a meeting is not execution. Someone still has to own the change, put it into the process and check that it works. Japan in 2026: where change starts to become visible Part 0 of a series on Japan in 2026. Institutions will not transform this year, but the gap between announced change and working practice is getting easier to see. What a startup accelerator's own systems tell founders in Japan An accelerator's applications, mentor booking, events and alumni directory show how it runs. What founders can check and what programs in Japan should build. What a company website reveals about the business behind it A polished site can hide weak systems, and a plain one can front a capable business. What a website reveals, what it hides, and what a Japan site needs. How to get useful introductions at Tokyo business events Most Tokyo networking events produce business cards, not results. What structured formats do differently, and how organizers and attendees can get useful introductions. Foreign workers, public opinion and the limits of a headline A poll about immigration can reveal attitudes. It cannot, by itself, establish crime trends or explain why respondents hold those attitudes. Digital literacy training for Japanese businesses: where to start Digital literacy at work means understanding what your tools do. How Japanese SMEs can find the real skill gaps and train staff and managers to close them. What work should stay with people when your business uses AI AI can draft, summarize and sort, but judgment, accountability and training juniors still need people. How Japanese SMEs can divide the work sensibly. Japanese Jesus and the Shingo Legend Japanese Jesus turns the Shingo legend, the story that Christ died in rural Aomori, into a folklore and mythwear project meant to bring attention and money back to the village. Immigration costs belong in Japan's labor policy debate A country competing for workers and founders should consider the total cost of staying, not only the number of people it hopes to attract. Winter Nights in Yugawara Winter Nights was a small December 2025 gathering in Yugawara, co-hosted with an executive coach: shared food, hot springs and conversation away from the usual meeting room. Long hours are a poor substitute for leadership Japan's prime minister says she sleeps two to four hours a night. Why visible exhaustion is a bad standard for leaders, and what managers can measure instead. A departure tax does not solve crowded streets by itself Tourism policy needs to distinguish raising revenue from reducing pressure in a particular place. They are related goals, but they are not the same job. Foreign workers need functioning local support Recruiting foreign workers and supporting people who live in Japan are connected but different jobs. Employment, housing, schools and access to reliable information each need practical arrangements. Tourism in Kyoto: behavior, capacity and clear information Visitor behavior and overcrowding need different responses. Clear rules can help with conduct; transport, timing and destination information affect where crowds form. Bitcoin mining and grid flexibility: questions before investment A flexible electricity load can help a power grid. That alone does not make a Bitcoin mining project in Japan profitable, low-carbon or needed at a given site. Making music and design with Thom Smith My collaboration with Thom Smith grew out of years in bands together. That shared history shapes how we work on his design releases, including a Year of the Horse nengajo. What to check before connecting business apps to ChatGPT Connecting kintone, freee, Google Drive or a CRM to ChatGPT or Claude changes what the AI can see and do. Check permissions, data and failure handling first. Aizu and rural tourism: maintain what you promote Tsuruga Castle's silted moats show a pattern across rural Japan: towns promote heritage they struggle to maintain. What operators in Aizu and similar regions can build. A politician's music taste is not a policy position A politician's interest in heavy metal can make an entertaining profile. It does not establish agreement with the values, communities or politics that different listeners associate with the music. Why Japanese expat assignments end early, and how to fix it Most large Japanese firms have seen expatriates return early, usually for cultural and leadership reasons, not language. What that means for training and cross-border teams. Japan AI copyright law: what Article 30-4 means for business Japan's Copyright Act Article 30-4 allows AI training, but AI outputs can still infringe. What businesses using generative AI in Japan should check. Japan's zombie companies are closing. Who replaces them? Rising interest rates are pushing Japan's weakest firms out. But tighter business visa rules make it harder for new founders, including foreign ones, to fill the gap. Starting a rural business in Japan: what akiya work taught me From punk shows and a hot sauce venture to rural property research, what I have learned about building a business around akiya and regional Japan: start small and specific. When senior leaders in Japan call themselves disorganized A senior leader who laughs off being disorganized sets the standard for the whole company. How the habit spreads in Japanese firms, and how to fix it with systems. How to make an event in Japan easy to find in search Before promoting an event in Japan, give it one public page with the date, venue and a working way to book, so search engines and guests can find it. Training leaders through the work they actually do Leadership training in Japan works when it changes something managers do at work. How to choose a program, set a baseline and make the new behavior stick. Client communication rules: email setup, chat and calls Client communication rules that keep projects moving: authenticate email with SPF, DKIM and DMARC, limit chat apps, acknowledge messages, book calls. Shipping from Japan to the US after the de minimis exemption ended The US ended duty-free entry for small parcels in 2025. What changed for sellers in Japan, how Japan Post shipping works now, and how to price duties into orders. How to get reliable work answers from ChatGPT, Claude and Gemini Vague prompts get confident, generic answers. How Japanese teams can brief AI assistants properly, use reasoning modes and check the output before it is used. Cuteness, play and adult life in Japan Cuteness can make room for play in adult life. That is an interesting cultural subject without assuming that a person's taste in characters or objects reveals a psychological diagnosis. Making an unfamiliar product easier to adopt A washlet is ordinary in Japan and strange elsewhere. Adoption depends on answering real questions about comfort, installation, maintenance and whether it is worth the cost. How to evaluate an AI vendor before your business buys Most AI products sold to Japanese businesses run on models from OpenAI, Google or Anthropic. Ask these questions about data, evidence, cost and exit. What ChatGPT is actually good for in small business work Where ChatGPT and similar assistants save real time in a small business, where they still need checking, and how to judge a new model release on your own work. Local business strategy in Japan: build for the place you serve A small pizza restaurant in western Shonan shows why copying Tokyo best practice fails outside Tokyo. How local businesses in Japan can build around their own customers. How to raise prices in Japan after decades of deflation Japanese customers now expect price increases, and record tourism has widened the market. How small businesses can set prices the work supports and explain them. Event registration, payment and check-in for events in Japan Guests judge an event by registration, payment and arrival. How to replace email RSVPs and cash at the door with a setup that works for events in Japan. August 30-31: fire and fermentation in Chigasaki A record of the Firelight & Fermentation weekend planned for August 30-31, 2025 on the Chigasaki coast: wild game over fire, fermented food, local beer and a night on the beach. Regional revitalization in Japan needs working businesses Vacant buildings and quiet landscapes only revive a region when someone runs a business in them. How to approach regional Japan: trust, a real service and operations. When Japan's political debate avoids the operating problem Japan's politics can stay busy while postponing hard decisions. How LDP dominance, factions and consensus culture shape that pattern, and what has changed since 2025. Building a working life beyond Tokyo Moving beyond Tokyo can create room for a different kind of business. It also changes access to customers, colleagues, transport and services. The decision deserves more than a cheap-rent argument. Economic frustration is not an explanation for blaming foreigners Frustration with wages, work and living costs deserves a serious political response. Treating foreign residents as the explanation avoids the institutions and decisions that should be examined. Staying adaptable while doing business in Tokyo Japanese companies value stability and consensus. How to recognize when a plan has stopped working, and how to change direction in Tokyo without fighting the system. Japan's reputation and the experience behind it Japan's international appeal can bring people to a product, place or event. It cannot ensure that they can find information, make a booking or get a useful answer. Choosing between LINE, Chatwork, Slack and Teams in Japan How a Japanese business should split work between LINE, Chatwork, Slack, Teams and email, and the rules that stop decisions getting lost between apps. What rural Japan needs from big technology investment SoftBank's reported trillion-dollar AI hub pitch shows how capital chases scale. Rural Japan needs patient investment in many small operators, shared systems and skills. Booking pages in Japan: Calendly, TimeRex or Google Calendar Replace scheduling emails with a booking page: when to use Calendly, TimeRex or Google Calendar in Japan, how to take payment and what to set up first. Japan Post lost its truck license: lessons on safety records Japan Post lost its truck license after skipped driver alcohol checks at most post offices. What happened, and how any business can keep safety records honest. Scheduling emails in Gmail and Outlook across Japan time zones How to schedule emails in Gmail, Outlook and Slack, why delayed sending helps teams in Japan keep reasonable hours, and how to time overseas messages. Sunk costs: deciding when to stop a project Money and time already spent do not justify the next investment. A practical way to judge whether a project, system or vendor still deserves support in Japan. Digital business cards and meishi etiquette in Japan Do digital business cards work in Japan? How meishi etiquette still applies, when to use Eight, Sansan or an NFC card, and how to follow up properly. Osaka Expo and the case for measuring lasting value The Osaka Expo drew big crowds and ended with an operating surplus. The harder questions are about public cost, the 1970 comparison and what actually lasts. Building a visual identity for a business in Japan A visual identity works when people recognize it everywhere you appear. How to build one for a Japan business, from bilingual type to meishi, LINE and the web. Room for psychedelic art in a professional identity A professional identity does not have to look anonymous. Vivid art like Tetsunori Tawaraya's can belong in it, if the personality stays coherent with the work people hire you for. What Japan's craft workshops need to stay in business Japan's traditional crafts are shrinking because too few workshops earn a living. Pricing, direct sales, product fit and succession matter as much as skill. How clear service pricing builds client trust in Japan Quiet discounts and blurred packages make clients unsure what they are buying. How service providers in Japan can publish and hold prices clients trust. Overlooked markets in Japan: finding them and testing them Japan has real demand that large companies and standard market reports miss. How to spot overlooked markets, and how to test whether one is a business. Japan's care technology should support caregivers Japan has invested heavily in care robots, but the care shortage is about people. How care providers can choose technology that reduces workload without replacing human contact. Blue ocean strategy in practice: markets people avoid A neglected market is not an empty one. How to find work customers struggle to get done, test whether they will pay, and build a model that can deliver it. Why job listings in Japan should show a real salary range A clear salary range lets candidates judge fit before applying and forces the employer to settle the role and budget first. What it means for hiring in Japan. How to digitize paper workflows in a Japanese business Paper, hanko and fax processes hold knowledge a new app can miss. How to map one analog workflow, keep what matters and digitize it so staff actually use it. Digital skills in Japan: training staff to replace legacy systems Replacing a legacy system in Japan fails when staff get a new login but no new skills. How to plan training, authority and time around a migration.