Tia N.List

Reported by 14 outlets

Ransomware attack disrupts Japan's IDCF Cloud used by govt clients

new2.4
Why this score
Breadth
2.00 / 2.0 · 14 sources
Authority
1.80 / 2.0 · best outlet weight
Severity
1.00 / 5.0 · CVSS + content signals
Velocity
2.00 / 2.0 · updates in 48h
Pickup speed
0.60 / 0.6 · time to second source
Recency
× 0.33 temporal multiplier
Community
+ 0.00 / 1.5 · reddit signal
Score
2.4 / 10 = base × recency + community
bleepingcomputer.comidcf.jpfawkes.rockscyberworldops.eucyber.netsecops.iotheperimetersite.comjapancyberwatch.combeyondmachines.netmalware.newsthecybersecguru.comjapantimes.co.jpmeterpreter.orgdailytechnow.comredhotcyber.com desk first seen 6d ago

Desk analysis

Japan's IDCF Cloud, used by government clients, suffered a ransomware disruption. Multiple sources confirm impact on infrastructure serving public-sector customers. Monitor for data-leak claims, service-restoration timelines, and whether the same ransomware family links to other regional targets.

Timeline

  1. original reporting

    Ransomware attack disrupts Japan's IDCF Cloud used by govt clients

    bleepingcomputer.com · 5d ago · October 8th, 2026

    IDC Frontier, a major Japanese cloud and digital infrastructure company, disclosed that its IDCF Cloud service was targeted in a ransomware attack that caused an outage at a data center cluster serving the eastern part of the country. The company says that the attack started on October 7 at 3:40 AM local time, forcing a shutdown of the network and system. “Our investigation has determined that a disruption in East Japan Region 1 was caused by a ransomware attack by a third party,” reads IDFC Cloud’s announcement . “We are continuing to investigate the precise cause and the scope of the impact,” the company added. The firm said the attack impacts 495 companies and local governments using its cloud service. The IDCF Cloud infrastructure-as-a-service platform is operated by IDC Frontier, a subsidiary of SoftBank Group, a multinational investment holding company based in Tokyo. The firm rents out virtual servers, storage, and networking that customers use to run websites, applications, and business systems in Japanese data centers. After detecting the attack, IDC Frontier isolated and shut down impacted systems in ‘East Japan Region 1’ to prevent the compromise from spreading. Currently, the company is working to identify and block the intrusion route and check security in other regions. IDCF Cloud has proactively disabled customer access to management consoles for all regions while it verifies their security, and will restore access after confirming it is safe to do so. Screensh

  2. update from idcf.jp

    当社サービスの一部システムに対する不正アクセスについて (IDC Frontier initial notice)

    idcf.jp · 7d ago · October 7th, 2026

    IDC Frontier's first notice, published October 7, 2026 per the advisory page (JST, date shown on the page), disclosed that unauthorized third-party access had caused an outage in part of its IDCF Cloud service starting around 03:40 that morning, with East Japan Region 1 as the affected scope. The company said affected customers were being contacted individually and that safety checks of other regions were underway.

  3. update from idcf.jp

    【第2報】当社サービスの一部システムに対する不正アクセスについて (IDC Frontier second report)

    idcf.jp · 7d ago · October 7th, 2026

    It stated network isolation and system shutdown were complete, identification of the intrusion route was ongoing, and management consoles in other regions had been shut off pending safety verification.

  4. update from japancyberwatch.com

    IDCF Cloud Ransomware Attack: Data in Four Zones Likely Unrecoverable; JR East Group Says Up to 6 Million Email Addresses May Have Leaked

    japancyberwatch.com · 6d ago · October 7th, 2026

    The article states that 495 companies and local governments were affected, four zones of East Japan Region 1 at the Shirakawa (Fukushima) data center were hit, and customer data in those zones is unlikely to be recoverable. It notes JR East and View Card disclosed that up to about 6.09 million records held by an email delivery service may have been viewed or taken. The report was updated through October 9.

  5. update from japancyberwatch.com

    IDCF Cloud outage (IDC Frontier, a SoftBank subsidiary): - Unauthorized access from ~03:40 JST Oct 7; East Japan Region 1 down - Ibaraki Pre

    japancyberwatch.com · 6d ago · October 7th, 2026

    IDCF Cloud outage (IDC Frontier, a SoftBank subsidiary): - Unauthorized access from ~03:40 JST Oct 7; East Japan Region 1 down - Ibaraki Pre

    via Mastodon https://japancyberwatch.com/articles/idcf-cloud-unauthorized-access-outage-2026

  6. update from japancyberwatch.com

    IDCF Cloud ransomware, the backup lesson in real time: - UD Talk: told by IDCF that "restoring the data is difficult"; rebuilding on another

    japancyberwatch.com · 6d ago · October 7th, 2026

    IDCF Cloud ransomware, the backup lesson in real time: - UD Talk: told by IDCF that "restoring the data is difficult"; rebuilding on another

    via Mastodon https://japancyberwatch.com/articles/idcf-cloud-unauthorized-access-outage-2026#data-restoration-is-difficult

  7. update from idcf.jp

    【第3報】当社サービスの一部システムへの不正アクセスによる障害について (IDC Frontier third report)

    idcf.jp · 6d ago · October 8th, 2026

    The third advisory, dated October 8, 2026 on the page, narrowed the impact to part of East Japan Region 1, specifically the tesla, henry, pascal, and joule zones, where virtual servers stopped and could not be restarted. It warned that customer data stored in those zones is expected to be difficult to extract or restore, with recovery possible only from backups customers hold themselves, and said the company had reported the incident to its supervising ministry and the Metropolitan Police. IDCF Cloud TypeS, formerly White Cloud ASPIRE, and IDCF Private Cloud were declared out of scope.

  8. mentioned by japancyberwatch.com

    IDCF Cloud ransomware, third report from SoftBank's IDC Frontier: - Customer data in four zones of East Japan Region 1 is "unlikely to be re

    japancyberwatch.com · 5d ago · October 8th, 2026

  9. update from beyondmachines.net

    IDC Frontier Ransomware Attack Disrupts 495 Organizations in Japan IDC Frontier suffered a ransomware attack that encrypted its East Japan R

    beyondmachines.net · 5d ago · October 8th, 2026

    IDC Frontier Ransomware Attack Disrupts 495 Organizations in Japan IDC Frontier suffered a ransomware attack that encrypted its East Japan R

    via Mastodon https://beyondmachines.net/event_details/idc-frontier-ransomware-attack-disrupts-495-organizations-in-japan-x-c-v-q-q/gD2P6Ple2L

  10. mentioned by fawkes.rocks

    IDCF Cloud ransomware attack hits 495 Japanese customers https:// fawkes.rocks/2026/10/08/idcf-c loud-ransomware-attack-hits-495-japanese-cu

    fawkes.rocks · 5d ago · October 8th, 2026

  11. mentioned by cyberworldops.eu

    IDC Frontier confirmed ransomware on IDCF Cloud East Japan Region 1, disrupting 495 tenant organizations. Forced shutdown of network segment

    cyberworldops.eu · 5d ago · October 8th, 2026

  12. update from cyber.netsecops.io

    📰 Ransomware Attack Cripples Japanese Cloud Provider IDCF Cloud Major Japanese cloud provider IDC Frontier hit by a crippling ransomware att

    cyber.netsecops.io · 5d ago · October 9th, 2026

    📰 Ransomware Attack Cripples Japanese Cloud Provider IDCF Cloud Major Japanese cloud provider IDC Frontier hit by a crippling ransomware att

    via Mastodon https://cyber.netsecops.io/articles/japanese-cloud-provider-idcf-cloud-hit-by-crippling-ransomware-attack/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

  13. mentioned by japancyberwatch.com

    IDCF Cloud ransomware, Oct 9 update: - JR East and View Card: an external email delivery service hit by the attack may have exposed data for

    japancyberwatch.com · 4d ago · October 9th, 2026

  14. update from malware.news

    Cyberattack at IDC Frontier disrupts services around nation

    malware.news · 4d ago · October 9th, 2026

    The Asahi Shimbun reports: IDC Frontier Inc., a SoftBank subsidiary that provides cloud services, said Oct. The Tokyo-based company said it is still investigating the scale of the damage and whether any personal information was compromised.

  15. update from www.bleepingcomputer.com

    # Ransomware attack disrupts # Japan 's # IDCF Cloud used by govt clients https://www. bleepingcomputer.com/news/secu rity/ransomware-attack

    www.bleepingcomputer.com · 4d ago · October 9th, 2026

    Ransomware attack disrupts # Japan 's # IDCF Cloud used by govt clients https://www.

  16. update from theperimetersite.com

    The worst news on the wire tonight isn't about how an attacker broke in. It's what happened next. IDCF Cloud says four of its zones are unre

    theperimetersite.com · 4d ago · October 9th, 2026

    The worst news on the wire tonight isn't about how an attacker broke in. It's what happened next.

  17. mentioned by japancyberwatch.com

    https:// japancyberwatch.com/articles/i dcf-cloud-unauthorized-access-outage-2026 # Ransomware # DataBreach # CloudSecurity # JREast # Japan

    japancyberwatch.com · 4d ago · October 9th, 2026

  18. update from thecybersecguru.com

    Ransomware Attack Cripples Japan’s IDCF Cloud: 495 Organizations Including Government Clients Hit as Threat Actor Claims 3.6 PB of Data Encr

    thecybersecguru.com · 3d ago · October 10th, 2026

    Ransomware Attack Cripples Japan’s IDCF Cloud: 495 Organizations Including Government Clients Hit as Threat Actor Claims 3.6 PB of Data Encr

    via Mastodon https://thecybersecguru.com/news/idcf-cloud-ransomware-attack-japan/

  19. mentioned by thecybersecguru.com

    Japan’s IDCF Cloud has reportedly been hit by a major ransomware attack affecting 495 organizations, including government clients. The threa

    thecybersecguru.com · 3d ago · October 10th, 2026

  20. mentioned by beyondmachines.net

    Peach Aviation Email Services Disrupted by IDC Frontier Ransomware Attack Peach Aviation experienced an email service disruption after its c

    beyondmachines.net · 3d ago · October 10th, 2026

  21. mentioned by thecybersecguru.com

    https:// thecybersecguru.com/news/idcf- cloud-ransomware-attack-japan/ # Ransomware # CloudSecurity # CyberAttack # IDCFCloud # Japan # Syst

    thecybersecguru.com · 3d ago · October 10th, 2026

  22. update from www.japantimes.co.jp

    Massive driver's license data breaches at the Japanese car-sharing service Times Car, caused by a cyberattack, have sent many people scrambl

    www.japantimes.co.jp · 2d ago · October 11th, 2026

    Massive driver's license data breaches at the Japanese car-sharing service Times Car, caused by a cyberattack, have sent many people scrambl

    via Mastodon https://www.japantimes.co.jp/news/2026/10/11/japan/crime-legal/japan-drivers-license-data-breach-spread/?utm_medium=Social&utm_source=mastodon

  23. update from meterpreter.org

    A massive IDCF Cloud ransomware attack has paralyzed critical infrastructure in Japan, causing data breaches and severe disruptions for hund

    meterpreter.org · 1d ago · October 12th, 2026

    A massive IDCF Cloud ransomware attack has paralyzed critical infrastructure in Japan, causing data breaches and severe disruptions for hund

    via Mastodon https://meterpreter.org/idcf-cloud-ransomware-attack-japan/?utm_source=mastodon&utm_medium=jetpack_social

  24. mentioned by dailytechnow.com

    A massive ransomware attack devastated the IDCF Cloud platform in Japan, impacting 495 organizations and risking severe permanent data loss.

    dailytechnow.com · 1d ago · October 12th, 2026

  25. mentioned by www.redhotcyber.com

    Ransomware devastates Japanese cloud! 495 organizations risk losing everything.

    www.redhotcyber.com · 1d ago · October 12th, 2026

  26. update from dailytechnow.com

    Now nearly five hundred tenants share one terrible afternoon in common. Air-gapped, offsite backups are the only weapon that survives a boss

    dailytechnow.com · 1d ago · October 12th, 2026

    Now nearly five hundred tenants share one terrible afternoon in common. Air-gapped, offsite backups are the only weapon that survives a boss

    via Mastodon https://dailytechnow.com/idcf-cloud-ransomware-attack-japan/

Covered in

digest 2026-10-11digest 2026-10-10digest 2026-10-09

Source on GitHub