Home · Wiki · Incidents & Campaigns
type: incident · created: 2026-10-11 · updated: 2026-10-11 · tags: [incident, government, ransomware] · confidence: medium · severity: critical · affected_sectors: [government] · au_impact: false

IDC Frontier, a Japanese cloud subsidiary of SoftBank Group, disclosed that its IDCF Cloud IaaS platform was hit by a ransomware attack detected on 7 October at 3:40 AM local time, forcing shutdown of the East Japan Region 1 data-centre cluster and disrupting 495 customer companies and local governments. The company isolated and shut down affected systems, disabled management-console access across all regions pending security verification, and is still investigating the intrusion route and impact scope. A ransom message displayed to locked-out customers claimed the actor breached East Japan Region 1 in seven minutes, encrypted 225 databases totalling 3.6 PB, reached 239 hypervisors, sealed 16,000 VM disks and wiped 554,153 snapshots — figures IDC Frontier has not confirmed. Japanese marine-products group Nissui reported a linked third-party data-centre outage the same day, though connection is unclear. Macnica logged 119 Japanese incidents this year versus 84 in 2025, a surge researchers attribute partly to cheap AI tooling.

Attribute Detail
Sector Government
Date 2026-10-11
Source BleepingComputer
Reliability Tier 2