Sakura Internet says 1.36 million accounts were exposed in intrusion active since 2023
Published · Updated
What happened
Sakura Internet announced that unauthorized access to its systems had been ongoing since 2023 and that about 1,360,563 accounts were affected. The company said unencrypted initial passwords were included in the exposed data and that it is patching vulnerabilities and notifying affected users.
Why it matters
A breach of this size at a domestic infrastructure and hosting provider can trigger forced password resets, service reviews, and regulatory scrutiny across customers that rely on Sakura Internet for cloud and internet services. The disclosure also raises questions about credential-handling practices, incident detection, and whether any public-sector or regulated-sector users need immediate containment steps.
Sakura Internet disclosed on September 21 that unauthorized access to its systems had continued since 2023 and affected about 1,360,563 accounts. The company said exposed data included initial passwords that had been stored without encryption, along with account information, and that it is notifying users and taking corrective action. The disclosure turns a provider-level security failure into a wider cloud and digital-governance issue because Sakura Internet supports internet infrastructure and public-sector related workloads in Japan.
Watch for
Sakura Internet publication on 2026-09-22 or 2026-09-23 of a formal FAQ or incident update stating whether government and municipal accounts were included Japan's Personal Information Protection Commission acknowledgement on 2026-09-22 or later of receiving a breach report or opening an inquiry METI or the Digital Agency notice on 2026-09-22 or 2026-09-23 directing public bodies to review Sakura Internet account exposure and credential resets JPCERT/CC advisory on 2026-09-22 or later referencing Sakura Internet indicators of compromise or recommended mitigation steps
Researched and written by AI from the sources listed, under published rules. How V³ Aware is made