Ransomware hits IDCF Cloud: four zones unrecoverable, 495 customers affected

IDC Frontier confirmed a ransomware attack on IDCF Cloud's East Japan Region 1 starting around 3:40 AM JST October 7. Four zones (tesla, henry, pascal, joule) were rendered unrecoverable and customer virtual servers there stopped entirely. The company isolated the region and disabled management-console access across all regions as a precaution. The affected count held at 495 companies and municipalities, suggesting no lateral spread beyond the four zones.

Sources: nationalcybersecurity.com

Update, October 14: IDC Frontier's fifth report, published October 14, finds no trace that data in customers' virtual servers was viewed or taken, and judges that no customer data leaked. Snapshot backups are retrievable for 194 of the 495 affected customers; the other 301 depend on their own backups. Separately, portal account details (login IDs and password hashes) of 48 customers were improperly viewed. (Fifth report as covered by Japan Cyber Watch and BigGo Finance.)