A teen in Japan allegedly weaponized ChatGPT to tear down a major anime platform from the inside.
Tokyo police have arrested a 15-year-old high school student for a cyberattack that forced an anime streaming service offline for more than a month. The suspect, whose name has not been released, lives in a city near Tokyo. He is accused of exploiting a server vulnerability on Bandai Channel, a subscription-based anime platform, to fraudulently cancel over 46,000 user accounts.
The case is drawing attention not just for the scale of the disruption, but for the tool the teenager used to pull it off: ChatGPT.
According to the Tokyo Metropolitan Police Department, the boy analyzed the service’s network traffic, identified a flaw in its servers, and then wrote a malicious program with the help of OpenAI’s chatbot. That program automated the attack, flooding Bandai Channel with fraudulent data in November 2025. Thousands of subscriptions were wiped out. The company had no choice but to suspend the entire platform while it rebuilt its systems and refunded angry customers.
How the attack worked
The teenager didn’t just stumble into the server room. Police say he reverse-engineered the platform’s network communications, spotted a weakness, and coded a script to exploit it at scale. ChatGPT helped him write the malicious code quickly and effectively.
The attack itself was blunt: send fake cancellation requests en masse, overwhelm the system, and watch accounts vanish. But the aftermath was anything but simple. Bandai Channel remained offline for over a month. The operator had to repair damaged infrastructure and process refunds for tens of thousands of subscribers.
Police say the company detected the breach early and blocked the suspect’s IP address. That didn’t stop him. He simply kept switching addresses and continued the cancellations from new locations.
A self-taught programmer with no grudge
When investigators finally caught up with him, the boy didn’t deny it. He admitted to the attacks and told police he held no grudge against Bandai or its parent company, Bandai Namco — one of Japan’s largest entertainment conglomerates and the publisher of globally famous video game franchises. Instead, he explained that he taught himself programming and simply enjoyed analyzing network communications. The attack, he suggested, was more about curiosity and technical challenge than malice.
His first arrest came in June, on a separate charge: logging into another user’s account without permission. That arrest triggered a deeper investigation that tied him to the November attack.
Bandai Namco’s history with cyber trouble
This isn’t the first time the company behind Bandai Channel has faced a serious security incident. In 2022, Bandai Namco disclosed a breach that may have exposed customer data after unauthorized access to systems used by several of its Asian subsidiaries. The AlphV ransomware group later claimed responsibility for that attack.
The 2025 incident, though smaller in scope, was arguably more disruptive in practice — taking an entire streaming service offline for weeks. The company reported the attack to police in November, and investigators identified the suspect by analyzing communication records.
What this case says about the next generation of hackers
A 15-year-old using ChatGPT to build an attack tool is a wake-up call. It shows how generative AI lowers the barrier to entry for serious cybercrime. You no longer need years of coding experience or access to dark-web forums. A chatbot can help you write the exploit.
Law enforcement in Japan is taking the case seriously, but the broader implications are harder to police. As AI tools become more powerful and more accessible, we’re likely to see more teenagers — and younger — experimenting with them in dangerous ways. The line between learning and breaking the law is getting thinner by the day.
For now, the boy faces legal proceedings in a country known for its strict cybercrime laws. Bandai Channel is back online. But the incident leaves an uncomfortable question hanging in the air: how many more curious kids are out there, armed with ChatGPT and a server vulnerability?
