Sakura Internet Says Sales System Access May Have Exposed 1.36 Million Accounts
Summary
Sakura Internet says attackers accessed its sales management system, potentially exposing information from up to 1,360,563 accounts. The investigation continues; no data exfiltration has been confirmed.
Key points
- Sakura Internet says attackers accessed its sales management system on August 9.
- Up to 1,360,563 member accounts may be affected; the company says the final number is still under investigation.
- Potentially exposed information includes customer contract and membership data.
- The company says passwords were hashed and the affected system did not store credit card information.
- The access was discovered while investigating a separate Sakura Rental Server incident; the company says it invalidated abused credentials and removed malware in that separate incident.
- Sakura Internet says it notified authorities and is contacting affected customers; no data exfiltration has been confirmed.
Article Details
- Victim Organization
- Sakura Internet
- Incident Type
- Unauthorized access to a sales management system with potential exposure of customer data
- Data Types Exposed
- Customer contract information
- Membership information
- Passwords (stored hashed; whether they were exposed is not confirmed)
- Affected Records
- Up to 1,360,563 member accounts may have been affected; the exact number remains undetermined.
- Operational Impact
- No operational or service disruptions were mentioned. No data exfiltration has been confirmed.
- Ransom Or Extortion
- BleepingComputer reported that it found no ransomware or data-extortion actor claiming the attack.
- Claim Status
- confirmed