Sakura Internet rental servers hit with malware and sales system accessed since 2023, putting up to 1.36 million accounts at risk

Japanese cloud and hosting provider Sakura Internet said in its third report on September 10 that it detected an anomaly on a maintenance server for its rental server service on August 9, and found unauthorized access to rental servers with malware planted, affecting 951 accounts ^[1]. It also found its sales management system was accessed without authorization from April 2023 to March 2026, possibly exposing names, addresses, phones, emails and contract details of up to 1,360,563 accounts, along with some unhashed initial passwords for rental servers and VPS; the company has found no clear evidence of exfiltration ^[1][2]. Sakura VPS and rental server users still on their initial contract passwords should change them now and beware of phishing emails, calls and texts exploiting the incident ^[1].

Industries mainly affected: Technology

1. Sakura VPS and rental server users still using initial passwords should change them now ^[1].