SAKURA internet: unauthorized access to rental servers and the sales system

On 9 August, SAKURA internet detected an anomaly on a maintenance server of its rental hosting service. An outsider had logged in to some customer environments through its management environment and planted malware. The investigation also found unauthorized access to the database of its sales management system, which had taken place between April 2023 and March 2026. Its third report on 10 September said 951 rental server accounts and 1,360,563 member accounts (overlapping) may have been viewed or taken, including some initial server passwords and VPS administrator initial passwords. No proof of data being taken out was found.