Sakura Internet: Sakura Internet hack exposes data of up to 1.36 million accounts

Sakura Internet Discloses Major Data Breach Impacting Over 1.3 Million Accounts

Japanese cloud and data center provider Sakura Internet has confirmed a cybersecurity breach affecting its sales management system, which stores customer contract and membership data. The incident, discovered during an investigation into a separate breach at its Sakura Rental Server service, may have exposed up to 1,360,563 member accounts, though the exact number remains under review.

The attack occurred on August 9, with hackers gaining unauthorized access to the system. While no data exfiltration has been confirmed, compromised information includes hashed passwords though the company states these should be difficult to decrypt. Notably, credit card details were not stored in the affected system.

Sakura Internet, a key player in Japan’s digital infrastructure and a selected provider for the country’s Government Cloud program, initially detected a less severe breach involving 583 accounts on its rental server platform. That incident involved unauthorized logins, malware installation, and access to customer-facing systems. The company invalidated compromised credentials and removed the malware, but the discovery of the broader breach elevated the incident’s severity.

Authorities have been notified, and affected customers are being contacted individually. While the type of malware remains unspecified, Sakura has not reported any operational disruptions. No ransomware or data extortion group has claimed responsibility for the attack. Investigations are ongoing.

Source: https://www.bleepingcomputer.com/news/security/sakura-internet-hack-exposes-data-of-up-to-136-million-accounts/

さくらインターネット（株） cybersecurity rating report: https://www.rankiteo.com/company/sakura-internet-inc

"id": "SAK1787174291",
"linkid": "sakura-internet-inc",
"type": "Breach",
"date": "8/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '1,360,563',
                        'industry': 'Technology/IT Services',
                        'location': 'Japan',
                        'name': 'Sakura Internet',
                        'type': 'Cloud and Data Center Provider'}],
 'attack_vector': 'Unauthorized Access',
 'customer_advisories': 'Affected customers contacted individually',
 'data_breach': {'data_encryption': 'Hashed passwords',
                 'data_exfiltration': 'Not confirmed',
                 'number_of_records_exposed': '1,360,563',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High (PII, hashed passwords)',
                 'type_of_data_compromised': 'Customer contract and membership '
                                             'data, hashed passwords'},
 'date_detected': '2023-08-09',
 'description': 'Japanese cloud and data center provider Sakura Internet '
                'confirmed a cybersecurity breach affecting its sales '
                'management system, which stores customer contract and '
                'membership data. The incident may have exposed up to '
                '1,360,563 member accounts, with compromised information '
                'including hashed passwords. Credit card details were not '
                'stored in the affected system.',
 'impact': {'data_compromised': 'Hashed passwords, customer contract and '
                                'membership data',
            'identity_theft_risk': 'High',
            'payment_information_risk': 'None (credit card details not stored)',
            'systems_affected': 'Sales management system'},
 'investigation_status': 'Ongoing',
 'references': [{'source': 'Sakura Internet Disclosure'}],
 'regulatory_compliance': {'regulatory_notifications': 'Yes'},
 'response': {'communication_strategy': 'Affected customers contacted '
                                        'individually',
              'containment_measures': 'Invalidated compromised credentials, '
                                      'removed malware',
              'law_enforcement_notified': 'Yes'},
 'title': 'Sakura Internet Major Data Breach Impacting Over 1.3 Million '
          'Accounts',
 'type': 'Data Breach'}