Updated
Updated · BleepingComputer · Aug 19
Sakura Internet Says 1.36 Million Accounts May Be Exposed in Breach
Updated
Updated · BleepingComputer · Aug 19

Sakura Internet Says 1.36 Million Accounts May Be Exposed in Breach

2 articles · Updated · BleepingComputer · Aug 19

Summary

  • Up to 1,360,563 Sakura Internet member accounts may have been exposed after hackers accessed the company’s sales management system holding customer contract and membership data.
  • The intrusion began on Aug. 9 and surfaced during an investigation into a separate Sakura Rental Server breach that had already affected 583 accounts and involved malware on Sakura systems.
  • Sakura said it has not confirmed any data exfiltration, stored passwords were hashed, and the compromised system did not contain credit card information.
  • The company has notified authorities, is contacting affected customers individually, and said it has seen no operational disruption so far.
  • The breach carries added weight because Sakura is a major Japanese cloud and data-center provider selected for Japan’s Government Cloud program.

Insights

How did a minor server intrusion silently expose over a million accounts at a key Japanese government cloud provider?
Why is this major cloud provider avoiding a mass password reset despite hackers planting hidden malware in their systems?
What hidden vulnerabilities allowed attackers to pivot from customer-facing servers directly into a sensitive internal sales database?