Ransomware takes down part of Japan's IDCF Cloud, affecting 495 organizations
October 7, 2026 (October 7, 2026)
At about 3:40 a.m. on October 7, ransomware hit East Japan Region 1 of IDCF Cloud, run by IDC Frontier, a SoftBank subsidiary. The company says 495 companies and local governments were affected, and websites of a prefecture and city governments went dark. On October 8 IDC Frontier said data in four zones of the region was unlikely to be recoverable by the provider, so restoration depends on customers' own backups. As of October 14 other zones and regions were reported unaffected, with safety checks continuing. No group has claimed it and the ransom note named none, and IDC Frontier has not said how the attackers got in. A frozen-food logistics firm, Nissui Logistics, had a separate outage whose link to the attack is unclear.
Why it matters
Customers who kept backups and snapshots only with the provider had nothing to restore from. The attackers' message claimed it took seven minutes to encrypt the region, which is their claim, not a confirmed figure.
What defenders can take from it
- Keep at least one backup outside your cloud provider's control, and test restoring from it.
- List which of your suppliers host on a single provider or region, and plan for that provider being offline.