Sakura Internet discloses data breach affecting up to 1.36 million accounts

Data Breach at Sakura Internet

Sakura Internet, a Japanese cloud and data center service provider, disclosed that its sales management system was accessed by hackers. The company stated that the incident may have impacted up to 1,360,563 customer accounts, though the exact number is still under investigation. This system stores customer contract and membership information.

Incident Details and Discovery

The unauthorized access to Sakura Internet's IT system occurred on August 9. The breach was discovered during an investigation into a separate, less severe incident involving unauthorized logins to 583 accounts on the Sakura Rental Server service, which also included malware installation. Sakura Internet has invalidated abused credentials and removed the malware.

Affected Data and Security Measures

While up to 1.36 million accounts were potentially compromised, no data exfiltration has been confirmed. Sakura Internet stated that stored passwords are hashed, making them difficult to decipher if stolen. The compromised system did not contain any credit card information. The company has notified relevant authorities and is informing affected customers individually.

Company Profile and Significance

Sakura Internet is a major Japanese digital infrastructure company offering web hosting, VPS, public cloud, data-center, and GPU computing services. It is a selected domestic provider for Japan’s Government Cloud program, positioning it as a strategic entity for reducing national dependence on foreign hyperscalers.