Sakura Internet Says Breach May Affect 1.36 Million Customer Accounts
Summary
Sakura Internet disclosed unauthorized access and malware in its customer management system. Up to 1,360,563 accounts may be affected; the company says no data exfiltration is confirmed and the incident was not ransomware.
Key points
- Sakura Internet detected anomalies while investigating a separate incident involving its Sakura Rental Server service.
- The company’s preliminary findings cited unauthorized logins to 583 accounts, access to customer-facing systems and data, and malware installed on its systems.
- Up to 1,360,563 customer accounts may have been affected; the system holds contract agreements and personal and corporate information.
- Sakura Internet said it removed the malware and rotated credentials that could have been exposed.
- The company said passwords were hashed and salted, not stored in plaintext.
- Sakura Internet said the incident was unrelated to ransomware and involved no ransom demand; no data exfiltration has been confirmed.
Article Details
- Victim Organization
- Sakura Internet
- Incident Type
- Confirmed breach of the customer management system involving unauthorized logins and malware installation.
- Incident Date
- 2026-08-09
- Data Types Exposed
- Contract agreements
- Personal information
- Corporate information
- Hashed and salted passwords may have been included in the accessed data; plaintext passwords were not stored
- Affected Records
- Up to 1,360,563 customer accounts may have been affected; 583 accounts experienced unauthorized logins.
- Operational Impact
- Attackers accessed customer-facing systems and customer data and installed malware. Sakura Internet said its security team removed the malware and rotated potentially exposed credentials. No confirmed data exfiltration has been reported.
- Ransom Or Extortion
- Sakura Internet confirmed the incident was unrelated to ransomware; no ransom demand was made.
- Claim Status
- confirmed
Countries
Industries
Cloud ComputingJapanese cloud computing and data center services provider Sakura Internet recently issued a security advisory disclosing that attackers breached its customer management system on August 9, 2026.Data center servicesJapanese cloud computing and data center services provider Sakura Internet recently issued a security advisory disclosing that attackers breached its customer management system on August 9, 2026.