Sakura Internet Hack Exposes Data of 1.36 Million Accounts

Sakura Internet, a Japanese cloud and data center provider, reported unauthorized access to its sales management system, potentially affecting 1,360,563 customer accounts. The breach was discovered during an investigation of a separate incident involving unauthorized access to 583 accounts on the Sakura Rental Server service. The attackers accessed the system on August 9, and while no data exfiltration has been confirmed, the investigation is ongoing. The compromised system contained customer contract and membership information, but did not store credit card data. Sakura has invalidated compromised credentials, removed malware, and is notifying affected customers. The company has also brought in external specialists for forensic analysis. Customers are advised to change passwords related to their accounts.

Key Points: • Sakura Internet's breach may impact 1.36 million accounts, with ongoing investigations. • Unauthorized access was first detected on August 9 during a separate incident involving 583 accounts. • No confirmed data exfiltration has occurred, but customers are advised to change their passwords.