A 15-year-old high school student in Saitama Prefecture, Japan, used ChatGPT to help write automation code that exploited a flaw in Bandai Channel's account-cancellation system, taking the streaming service offline for roughly six weeks and exposing up to 1.36 million user records. According to Tokyo Metropolitan Police, the minor auto-canceled 46,812 subscriber accounts in under four hours before Bandai Namco Filmworks pulled the entire platform. The teenager was detained in June 2026, months after the November 2025 incident. This brief breaks down the confirmed timeline, the exposed data, and why a consumer chatbot in the hands of a curious minor is being treated as an early signal of a larger threat trend.
What Happened
Bandai Channel is a subscription video-on-demand service for anime and tokusatsu programming, operated by Bandai Namco Filmworks, the film and animation subsidiary of Bandai Namco Holdings. It is a niche product compared to the company's blockbuster game franchises like Tekken, Pac-Man, and Dark Souls, which is part of why the incident caught the industry off guard.
On November 4, 2025, between roughly 5:00 p.m. and 8:46 p.m. Japan Standard Time, the attacker began sending falsified requests to servers managed by Bandai Namco Filmworks. The requests systematically triggered the platform's account-cancellation, or "withdrawal," process across tens of thousands of accounts in a single evening. By the time the activity was noticed, 46,812 subscriber accounts had been automatically canceled.
Police say the teenager discovered the flaw on his own, wrote an initial automation script, and then asked ChatGPT to help finish and optimize it after his own version ran too slowly. The chatbot-assisted version closed the gap between a slow proof of concept and an attack fast enough to cancel nearly 47,000 accounts in under four hours.
Bandai Namco Filmworks suspended Bandai Channel's entire operation on November 6, 2025, disabling video playback, subscriptions, billing, and user profiles, and published a public notice the following day warning that customer data may have been affected. Full service was not restored until December 19, 2025, a shutdown of roughly six weeks while the company investigated and rebuilt its defenses. The suspect was not detained by Tokyo Metropolitan Police until June 2026.
What Was Taken
The primary confirmed impact was the forced cancellation of 46,812 active subscriber accounts, disrupting billing, subscription status, and user profiles across the platform. Beyond the canceled accounts, Bandai Namco Filmworks warned that up to 1.36 million user records may have been exposed during the incident.
While this was not a ransomware or exfiltration-for-sale event, the record exposure is significant because subscription platforms of this kind typically hold personally identifiable information, account credentials, billing references, and viewing or subscription history. The company's public notices centered on the possibility of customer data being affected rather than confirmed mass theft, but the scale of the record set puts a large user base at potential risk. The most tangible harm to date is operational: a functioning revenue platform at a company with roughly $9.57 billion in annual group revenue was rendered unusable for six weeks.
Why It Matters
The alarming element here is not the sophistication of the attacker but the lack of it. A minor with no professional software engineering background used a widely available consumer chatbot to turn a slow, homemade script into an attack capable of disrupting a platform operated by a multi-billion-dollar entertainment company.
For defenders, this is a data point in a trend that security teams have been anticipating: AI-assisted tooling lowering the skill floor for offensive activity. The barrier that once separated a curious individual from a capable attacker was time, expertise, and the ability to write efficient automation. That barrier is thinner now. Business-logic abuse, in particular, does not require exploiting a memory-corruption bug or a novel zero-day; it requires understanding a workflow and automating requests against it, exactly the kind of task a chatbot can accelerate.
It also underscores that non-flagship, lower-attention services are viable targets. Attention and hardening at Bandai Namco were concentrated on the game side of the business, and a smaller streaming subsidiary became the entry point for a six-week disruption.
The Attack Technique
The core technique was business-logic abuse rather than a traditional software exploit. The attacker identified that the account-cancellation, or withdrawal, endpoint could be triggered by falsified requests without adequate validation, rate limiting, or authentication controls to prevent mass automated invocation.
Once the flaw was identified, the attack was purely a matter of automation and speed. The teenager wrote a script to fire cancellation requests at scale, then used ChatGPT to optimize the code when the initial version proved too slow. The improved script was fast enough to cancel 46,812 accounts within a roughly four-hour window. There is no indication of malware, credential theft, or a criminal syndicate; the entire incident hinged on an unprotected state-changing workflow being driven far faster and far wider than legitimate use would ever require.
What Organizations Should Do
- Rate-limit and throttle all state-changing endpoints, especially destructive or irreversible actions like account cancellation, deletion, and subscription termination. Enforce per-user and per-IP ceilings that make mass automated invocation impractical.
- Require strong re-authentication and confirmation for irreversible account actions, such as re-entering a password, verifying via email, or completing a step that cannot be scripted at scale.
- Audit business logic, not just code. Threat-model each workflow by asking what happens if a legitimate action is performed thousands of times in minutes, and validate server-side that every request is authorized and well-formed.
- Deploy anomaly detection on action volume so that a spike of tens of thousands of cancellations in one evening triggers automated alerting and, ideally, automatic circuit-breaking rather than being discovered hours later.
- Extend security coverage to lower-profile subsidiaries and secondary platforms, which often receive less hardening and monitoring than flagship products but share the same brand and customer trust.
- Plan for AI-lowered attacker skill floors. Assume that automation which once required expertise is now accessible to unsophisticated actors, and prioritize controls that blunt scaled abuse regardless of who is behind it.
Sources: Bandai Namco Hack: 15-Year-Old Exposes 1.36M Records [2026]