Back Bitdefender

Sakura Internet hack may affect 1.36 million accounts

Bitdefender • August 20, 2026

Japanese cloud and data center provider Sakura Internet is investigating unauthorized access to a sales management system that may have exposed personal and contract information linked to as many as 1.36 million customer accounts. The company says the final impact is under investigation and large-scale data exfiltration hasn’t been confirmed.

Sakura Internet uncovered the broader compromise while investigating unauthorized access to its Sakura Rental Server service. That earlier incident affected 583 accounts, allowed attackers to reach customer environments and involved malware on company systems.

Investigators subsequently found evidence of possible unauthorized access to a separate sales management system holding membership and service-contract information. The activity occurred before Aug. 9, when the rental-server intrusion was detected, although Sakura has yet to determine whether the two events are directly connected.

Sakura also identified possible exposure of hashed passwords belonging to 30 accounts. The company says it has found no evidence that data was removed from the affected system, while credit card information was not stored there.

Sakura has revoked the credentials abused during the intrusion, removed malware, strengthened monitoring and brought in external specialists for forensic analysis. The company says it will customers who need to take specific action as investigators establish the final scope.

Customers can take precautions now by changing Sakura-related passwords, particularly FTP and email credentials, and replacing reused passwords on other services. Because leaked identity and contract information can make fraudulent messages more convincing, unexpected emails, attachments and links claiming to concern the breach should receive extra scrutiny.

Bitdefender Digital Identity Protection can monitor personal information for breach exposure and alert users when compromised data surfaces online or on the dark web.

Suspicious follow-up emails, texts, links or QR codes can also be checked with the free Bitdefender Scamio scam-detection service before users interact with them.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Sakura Internet Data Breach Affects 1.36 Million Accounts Sakura Internet, a Japanese cloud and data center provider, reported unauthorized access to its sales management system, potentially exposing data for up to 1,360,563 member accounts. The breach was discovered during an investigation into a separate incident involving unauthorized logins to its Sakura Rental Server service, which affected 583 accounts. The unauthorized access to the sales management system occurred before August 9, when the rental server breach was detected. While the investigation is ongoing, no confirmed data exfiltration has been reported, and the company has stated that passwords are hashed and credit card information is not stored in the compromised system. Sakura has invalidated the compromised credentials, removed malware, and is notifying affected customers individually. The company is also working with external forensic specialists to assess the full impact of the breach. 4 sources 55

Extracted Entities

Sakura Internet hack may affect 1.36 million accounts

The full story

Extracted Entities

Attack Types (2)

Companies (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)