Threat Pulse 62High
Ransomware hits SoftBank's IDCF Cloud; 495 Japanese companies and governments disrupted
Severity 7Status unknownconfirmedCloud and SaaSGovernment

IDC Frontier's East Japan Region 1 was hit by ransomware starting 3:40 AM JST on October 7; the attacker claims 225 databases (3.6 PB) encrypted, 239 hypervisors reached and 554,153 snapshots wiped. Customers including local governments lost systems, and Management consoles were disabled in all regions.

What to do: Region isolated; no restoration timeline given at disclosure; attacker claims unverified. No source newer than Oct 8; current recovery state unknown. Oct 13: Ride On Express (Ginnosara, Kamatora, Sushi Jotou) said up to 6.5 million member records may be exposed after its server operator reported ransomware; Impress links it to the IDCF attack (its inference, not a company statement).

· 29 days ago · 495 companies and local governments · BleepingComputer
SourcesBleepingComputerinternet.watch.impress.co.jp
Why this score

Hundreds of organizations including governments (impact 3), successful destructive attack (exploitability 3), government and logistics touched (criticality 1).

Back to the board

Updated Nov 5, 01:45 UTC. Refreshes on its own.

Add a threat

Paste a link to an advisory, an article or an X post. A person reads every submission before it shows; nothing posts on its own.

Share

The picture people see when the link is posted
Post on XSave picture

This picture is what X, iMessage, Slack and Facebook show under the link. It is drawn fresh from the live board: the board and chart pictures update every 10 minutes, an event picture follows that event.