Sakura Internet Reports Unauthorized Access to 583 Rental-Server Accounts
Summary
Sakura Internet confirmed unauthorized access to 583 rental-server accounts and malware on some servers. Customer data may have been viewed or obtained; the company disabled credentials, blocked access and continues investigating.
Key points
- Sakura Internet detected an anomaly on August 9, 2026, and confirmed that an attacker accessed some customer environments through company-managed infrastructure.
- Unauthorized logins affected 583 accounts; the company is still investigating the full scope.
- Malware was found on some servers, and attackers reached areas accessible through customer accounts.
- Customer-stored information and user identifiers may have been viewed or obtained; the company has not determined the complete affected data set.
- Sakura Internet disabled potentially compromised credentials, blocked access, removed malware and restricted some rental-server features while investigating.
- The company reported no customer claims of environment tampering so far and said it had not identified impact to several other named services.
- Affected customers are being notified individually; the company advises them to check for suspicious files, accounts, changes, logins or emails and to beware of incident-related phishing.
Article Details
- Victim Organization
- さくらインターネット株式会社
- Incident Type
- Unauthorized access to customer environments, including unauthorized logins and installation of malware on some servers.
- Disclosure Date
- 2026-08-17
- Data Types Exposed
- Information stored in customer areas
- User identifiers
- Potentially other customer personal data
- Affected Records
- 583 accounts were identified as targets of unauthorized logins; the scope of potentially affected customer environments remains under investigation.
- Operational Impact
- The company invalidated potentially affected credentials, blocked access, removed malware, and restricted some service features while investigating. No reports of customer-environment tampering had been confirmed at the time of the notice. The notice said no impact had been identified for Sakura VPS, Sakura Cloud, Sakura Dedicated Server PHY, or High Fire PHY.
- Claim Status
- confirmed