IDC Frontier ransomware attack impacts 495 organizations in Japan

IDC Frontier ransomware attack IDCF Cloud data breach cloud service outage

IDC Frontier, a SoftBank subsidiary, confirmed that a ransomware attack on its IDCF Cloud service has disrupted operations for 495 companies and local government organizations. The incident, which began around 3:40 a.m. on October 7, specifically targeted the East Japan Region 1, affecting four availability zones: tesla, henry, pascal, and joule.

The company reported that virtual servers in these zones have stopped operating and that customer data stored within them may be difficult or impossible to restore. Affected users are being advised to use their own backups for recovery. To prevent further damage or data leaks, IDC Frontier disconnected the affected region from the network and suspended management consoles across other regions for safety checks.

The attack has caused significant downstream disruptions. Nissui Logistics reported a suspension of product shipping and receiving across 17 sites in Japan. Peach Aviation experienced delays and failures in sending itinerary emails to approximately 1.89 million customers, though no personal information leaks have been confirmed for the airline. Additionally, the Ibaraki Prefecture government reported that its official websites became inaccessible following the outage.

Entities

East Japan Region 1 · Fibergate · IDC Frontier · IDCF Cloud · Ibaraki Prefecture · Nissui · Nissui Corp. · Nissui Logistics · Peach Aviation · SoftBank Group

Claims

What the coverage asserts, and how many sources carry each claim.

[● 4 SOURCES] Nissui Logistics Co., Ltd. cannot perform the shipping or receiving of products, including frozen foods. cybersecurity-jp.com · internet.watch.impress.co.jp
[● 4 SOURCES] The Ibaraki Prefecture website has become inaccessible due to the incident. internet.watch.impress.co.jp · agora-web.jp · japonsamourai.fr
[● 2 SOURCES] As of the second report, no data leaks have been confirmed. cybersecurity-jp.com · ascii.jp
[● 11 SOURCES] The attack has affected 495 contracted companies and local governments. cybersecurity-jp.com · internet.watch.impress.co.jp · ascii.jp · agora-web.jp · scan.netsecurity.ne.jp · +3 more
[● 10 SOURCES] The system failure was caused by a ransomware attack targeting the East Japan Region 1. cybersecurity-jp.com · internet.watch.impress.co.jp · ascii.jp · agora-web.jp · scan.netsecurity.ne.jp · +4 more
[● 6 SOURCES] IDC Frontier disconnected East Japan Region 1 from the network to prevent further damage or data leaks. cybersecurity-jp.com · internet.watch.impress.co.jp · ascii.jp · agora-web.jp · scan.netsecurity.ne.jp
[● 4 SOURCES] The ransomware attack affected four specific zones: tesla, henry, pascal, and joule within East Japan Region 1. ascii.jp · que.com · news.mynavi.jp
[● 4 SOURCES] Customer data stored in the affected zones is expected to be difficult to extract or restore. ascii.jp · agora-web.jp · news.mynavi.jp
[○ 1 SOURCE] The ransomware attack affected four specific zones in East Japan Region 1: tesla, henry, pascal, and joule.
[● 3 SOURCES] Nissui Logistics experienced a suspension of product shipping and receiving operations due to the outage. cybersecurity-jp.com · japonsamourai.fr · internet.watch.impress.co.jp
[● 2 SOURCES] Peach Aviation experienced delays and failures in sending itinerary emails due to the attack on IDC Frontier. www.aviationwire.jp · www.fnn.jp