Monju Nuclear Power Plant

Monju Nuclear Power Plant, also referred to as Monju, is a nuclear power facility located in Japan. The plant was designed to generate electricity through nuclear fission processes. Due to historical safety concerns, the facility has been non‑operational for an extended period. Its primary role has been to serve as a site for nuclear power generation within the country's energy infrastructure.

In January 2014, the plant experienced a malware infection when a worker installed a compromised update for a video playback program. The exploit took advantage of weaknesses in the plant's software patch management procedures. Although the reactor was not producing power at the time, the malware gained unauthorized access to internal documents, employee records, emails, and training materials. Analysis traced the command‑and‑control infrastructure of the malware to servers linked with South Korea. The attack did not exhibit the technical sophistication associated with state‑sponsored tools such as Stuxnet. The incident underscores the risks posed by inadequate update controls even in environments that are intended to be air‑gapped. It serves as a case study of how removable media or software updates can breach isolated critical‑infrastructure systems.