The IDCF Cloud attack has affected 495 companies and local government services in Japan, according to cloud provider IDC Frontier. The disruption has reached railway businesses, food logistics and other services, while some customers face potentially unrecoverable data loss.
The SoftBank-owned provider said attackers knocked servers offline in the early hours of Wednesday, October 7. Subsequently, it warned that severe damage across four cloud zones would force affected customers to rebuild systems elsewhere.
Meanwhile, railway companies have reported possible exposure involving millions of records through services connected to the cloud platform.
Customers Face Difficult Recovery After Cloud Damage
IDC Frontier’s October 8 update outlined serious recovery problems in part of its East Japan Region 1 infrastructure.
According to the provider, retrieving or restoring some customer data would likely prove difficult. Its assessment indicated that affected customers would need their own backups to recover that information.
Consequently, those organizations face two connected challenges: finding alternative infrastructure and restoring the data needed to resume operations.
IDC Frontier provides a domestic cloud option for businesses and public bodies seeking to host systems in Japan. However, the incident shows how problems at one shared provider can spread across otherwise unrelated organizations.
Railway Companies Investigate Possible Data Exposure
JR East and its credit card subsidiary, View Card, reported potential unauthorized access involving up to 6.09 million records. The exposure concerned email-delivery services that used IDCF Cloud.
Separately, JR Kyushu reported possible exposure involving 1.3 million email addresses.
The railway disclosures stated that the affected information did not include credit card numbers, home addresses or telephone numbers.
These findings concern customer information and supporting digital services. They do not establish that attackers compromised train-control systems or disrupted railway operations.
Moreover, possible access does not confirm that attackers stole every potentially affected record. Investigations must still establish the full extent of exposure.
Food Logistics Outage Interrupts Shipments
The impact also extended to physical goods. Frozen-food warehouse operator Nissui Logistics reported an outage that prevented it from receiving and shipping products.
As a result, the disruption went beyond unavailable websites or email services and interfered with warehouse operations.
Other organizations reportedly caught in the fallout included Ibaraki Prefectural Police, travel booking service Skyticket and karaoke operator Daiichikosho.
Reports also identified e-commerce platform FutureShop and a fan messaging service for the Japanese idol group SKE48.
However, the available disclosures do not establish an identical impact across all affected organizations. Some reported service interruptions, while others investigated potential information exposure.
Claims About Attack Scale Remain Unverified
Screenshots circulating online attributed sweeping claims to the attackers behind the IDCF Cloud attack.
The messages alleged access to 239 virtualization host systems and the encryption of 225 storage systems holding 3.6 petabytes of data. They also claimed to have locked more than 16,600 virtual machine disks and deleted 554,153 backup snapshots.
According to those messages, the operation took seven minutes. However, these figures remain attacker claims rather than confirmed findings from IDC Frontier.
At the time of the disclosures, the provider had not explained how the attackers gained access or identified those responsible. It also had not disclosed a ransom demand or established how much information, if any, attackers stole.
The circulating ransom note did not identify a known ransomware group.
Government Urges Broader Security Attention
Following the disruption, Japan’s National Cybersecurity Office sent government ministries a warning for distribution to local public bodies and private companies.
The notice urged organizations to update security protections, use strong passwords and strengthen safeguards throughout their supply chains.
It also framed cybersecurity as an organization-wide responsibility, extending beyond IT departments.
For affected customers, immediate priorities remain restoring services and determining whether information escaped their systems. Meanwhile, IDC Frontier’s recovery warning makes the availability of customer-held backups a central issue in the response.
0 responses to “IDCF Cloud Attack Hits 495 Organizations Across Japan”