Japanese cloud and data center provider Sakura Internet has disclosed that hackers gained access to a sales management system containing customer contract and membership information.
The company says the incident may have affected up to 1,360,563 member accounts, although the final number has not yet been confirmed.
Sakura Internet said the unauthorized access occurred on August 9. The company discovered the incident while investigating a separate breach involving its Sakura Rental Server service.
The earlier incident involved unauthorized logins to 583 accounts, along with access to customer-facing systems and customer information. Malware was also found on Sakura’s systems. The company said it invalidated the compromised credentials and removed the malware.
The investigation into that incident subsequently uncovered the larger exposure involving the sales management system. Based on the information collected so far, Sakura Internet estimates that 1,360,563 accounts may have been compromised. The company said there is currently no confirmation that the data was actually exfiltrated.
Sakura Internet said passwords stored in the affected system are hashed, meaning they should be difficult to recover even if the information was accessed. The company also confirmed that credit card information is not stored in the compromised system.
The company has reported the incident to the relevant authorities and is contacting customers individually when their information may have been exposed.
Sakura Internet is a major Japanese digital infrastructure provider offering web hosting, VPS services, public cloud infrastructure, data center services and GPU computing. The company has also been selected as a domestic provider for Japan’s Government Cloud program.
Sakura Internet has not disclosed what type of malware was discovered during its investigation. The company also has not reported any operational or service disruptions related to the incident.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
There is currently no known ransomware or data-extortion group publicly claiming responsibility for the attack. The investigation remains ongoing, and Sakura Internet says the exact number of affected accounts will be determined as it continues reviewing the incident.
