Sakura Internet Discloses Major Data Breach Impacting Over 1.3 Million Accounts Japanese cloud and data center provider Sakura Internet has confirmed a cybersecurity breach affecting its sales management system, which stores customer contract and membership data. The incident, discovered during an investigation into a separate breach at its Sakura Rental Server service, may have exposed up to 1,360,563 member accounts, though the exact number remains under review. The attack occurred on August 9, with hackers gaining unauthorized access to the system. While no data exfiltration has been confirmed, compromised information includes hashed passwords though the company states these should be difficult to decrypt. Notably, credit card details were not stored in the affected system. Sakura Internet, a key player in Japan’s digital infrastructure and a selected provider for the country’s Government Cloud program, initially detected a less severe breach involving 583 accounts on its rental server platform. That incident involved unauthorized logins, malware installation, and access to customer-facing systems. The company invalidated compromised credentials and removed the malware, but the discovery of the broader breach elevated the incident’s severity. Authorities have been notified, and affected customers are being contacted individually. While the type of malware remains unspecified, Sakura has not reported any operational disruptions. No ransomware or data extortion group has claimed responsibility for the attack. Investigations are ongoing.