Ransomware attack disrupts Japan’s IDCF Cloud, affecting 495 organizations
Summary
IDC Frontier says a ransomware attack caused an outage in IDCF Cloud’s East Japan Region 1, affecting 495 companies and local governments. The company shut down impacted systems and disabled management-console access while investigating.
Key points
- IDC Frontier says the ransomware attack began at 3:40 a.m. local time on October 7 and disrupted its East Japan Region 1 data center cluster.
- The company reported that 495 companies and local governments using IDCF Cloud were affected.
- IDC Frontier isolated and shut down impacted systems to limit the spread of the attack.
- Customer access to management consoles across all regions was disabled while the company checks security; access will return after it is confirmed safe.
- The attacker claimed to have encrypted 225 databases and affected hypervisors, VM disks, and snapshots; these claims have not been confirmed by the company.
Article Details
- Victim Organization
- IDC Frontier
- Incident Type
- Ransomware attack
- Incident Date
- 2026-10-07
- Disclosure Date
- 2026-10-08
- Affected Records
- Not disclosed
- Affected Data Size
- The unnamed threat actor claimed to have encrypted 3.6 PB of data; the article does not independently confirm this volume.
- Operational Impact
- IDC Frontier confirmed an outage in IDCF Cloud's East Japan Region 1 affecting 495 companies and local governments. The attack began at 3:40 AM local time, and the company isolated and shut down affected networks and systems to prevent further spread. Customer access to management consoles was disabled across all regions pending security checks. The threat actor separately claimed to have encrypted 225 databases, reached 239 hypervisors, sealed 16,000 VM disks, and wiped 554,153 snapshots; these figures were not independently confirmed.
- Ransom Or Extortion
- Not disclosed
- Claim Status
- confirmed
MITRE ATT&CK
T1486 · Data Encrypted for ImpactIDC Frontier confirmed a ransomware attack; the unnamed threat actor claimed to have encrypted 225 databases containing 3.6 PB of data.T1490 · Inhibit System RecoveryThe unnamed threat actor claimed to have wiped 554,153 snapshots, potentially inhibiting recovery. The article does not independently confirm this activity.
People
Vendors
Products
Countries
Industries
cloud and digital infrastructureIDC Frontier, a major Japanese cloud and digital infrastructure company, disclosed that its IDCF Cloud service was targeted in a ransomware attack that caused an outage at a data center cluster serving the eastern partseafood and foodNissui is a Japanese seafood and food group with approximately 11,500 employees and an international supply chain spanning fishing, aquaculture, processing, and sales.