Sakura Internet Data Breach Affects 1.36 Million Accounts

• •Sakura Internet disclosed a breach affecting up to 1.36 million accounts.
• •Unauthorized access was detected in the sales management system during a separate investigation.
• •No confirmed data exfiltration has occurred, and compromised passwords are hashed.

Sakura Internet, a Japanese cloud and data center provider, reported unauthorized access to its sales management system, potentially exposing data for up to 1,360,563 member accounts. The breach was discovered during an investigation into a separate incident involving unauthorized logins to its Sakura Rental Server service, which affected 583 accounts. The unauthorized access to the sales management system occurred before August 9, when the rental server breach was detected. While the investigation is ongoing, no confirmed data exfiltration has been reported, and the company has stated that passwords are hashed and credit card information is not stored in the compromised system. Sakura has invalidated the compromised credentials, removed malware, and is notifying affected customers individually. The company is also working with external forensic specialists to assess the full impact of the breach.