Ransomware takes IDCF Cloud region offline in Japan: 495 organisations hit and backups improperly stored
IDC Frontier, a SoftBank subsidiary, suffered a ransomware attack in its East Japan 1 region affecting 495 companies and local governments. The provider has indicated that across four zones, customers will need to rebuild their systems and restore from their own backups.
News summary
Early on 7 October 2026, the East Japan 1 region of IDCF Cloud, operated by IDC Frontier (SoftBank group), became unresponsive. The company confirmed it was a third-party ransomware attack and, according to Cybernews, reported that 495 companies and local government services were affected.
In its update on 8 October, the provider indicated that four cloud zones had been so severely damaged that customers would have to rebuild their systems elsewhere and restore data from their own backups. Those affected include railway operators, police services and food logistics companies.
The attackers claimed to have accessed the region’s management plane and also destroyed the backups, but the provider has not confirmed these figures, so they should be treated as claims. The relevant point is the pattern: the attack was not against a server, but against the layer that manages the entire platform.
This holds a direct lesson for Spanish companies. Using cloud infrastructure does not transfer responsibility for backups: if the only copies reside with the same provider, in the same region and under the same management console, a compromise of that console can wipe them out.
Source: Cybernews — 9 October 2026
Frequently Asked Questions
- Could something like this happen with a European cloud provider?
- Any platform can suffer a compromise of its management layer. Therefore, protection must not rely on a single provider or a single management console.
- Are the cloud provider’s own backups not sufficient?
- They are helpful for ordinary failures, but if they share a platform and credentials with the production environment, they can be affected by the same incident. An independent backup copy is advisable.
Concepts mentioned in this article: Cloud · Backup · Ransomware
A backup that shares a destination with the production environment is not a valid recovery strategy. At Seintec, we design independent backup solutions with immutability and tested restores, including at our Osona data centre. Speak to our team.
Contact SeintecRelated service
Backup
Back up your data in the cloud privately and securely.