Ransomware Hits IDCF Cloud in Japan, Affecting 495 Organizations Including JR East

A ransomware attack knocked IDCF Cloud, the cloud service of IDC Frontier (a SoftBank group company), offline and hit 495 companies and local governments across Japan. The outage began at 3:40 a.m. on Wednesday, October 7, 2026 in Japan (18:40 UTC on Tuesday, October 6). In four zones of the eastern region, customer data may never come back.

Key Details

The victims include prefectural websites, a news agency, a cold-chain logistics operator and the email service of JR East, the country's largest railway company. The incident puts the idea of sovereign cloud under real stress, with a single provider dragging hundreds of customers down in one night. IDCF Cloud is the virtual infrastructure service (IaaS, meaning servers and storage rented by the hour) run by IDC Frontier.

Why It Matters

This attack demonstrates the systemic risk inherent in cloud infrastructure dependencies. When a major cloud provider suffers an outage, the cascading effects can impact hundreds of downstream customers, highlighting the importance of multi-cloud strategies and robust disaster recovery planning for organizations relying on cloud services.

Context

IDCF Cloud shut down the affected region and cut it off from the network to prevent secondary damage and data leaks. While the exact attack vector remains under investigation, the incident serves as a reminder of the persistent threat posed by ransomware to critical infrastructure and the need for comprehensive cybersecurity measures across all sectors of the economy.