ENKR

Sakura Internet possible member data breach

Add to my breach check

Made public

What leaked10

Replaceable

  • Password

Hard to replace

  • Mobile number
  • Home or delivery address
  • Email address
  • Employer
  • Other profile data

Permanent

  • Private messages
  • Date of birth
  • Full name
  • Gender
  • Passwordmember ID password, 30 accounts
  • Private messagesmail data on 951 Rental Server accounts
  • Mobile numberphone number · type not stated
  • Employercompany name and department
  • Other profile datamember ID, fax number, contracted services, contract period, billed amounts; unhashed initial server or admin passwords of some Rental Server and VPS contracts

To-dos7 · about 2 h in all

  1. Change the leaked password everywhere you reused itabout 30 minfreeStops: account takeover
  2. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: scam calls, phishing messages
  3. Use an authenticator app or passkey instead of SMS codesabout 20 minfreeLimits harm from: account takeover, SMS code theft
  4. Turn on instant transaction alertsabout 5 minHelps you notice: scam calls
  5. Turn on two-step sign-in for email and bankingabout 15 minfreeLimits harm from: account takeover
  6. Remove your address and phone from public profiles and tighten SNS privacyabout 20 minfreeLimits harm from: visits or contact at home
  7. If threatened: do not pay, keep the messages, report it to the policeabout 30 minfreeLimits harm from: extortion with private data

What happened next11 events

  1. Undetected 2 eventsabout 3 yr 4 mo · show events
  2. Response 9 eventsNotice in 8 days · Back to latest
  3. RemedyNone on record
  4. PenaltyNone on record
  5. DisputesNone on record

Response: 9 events

Back to latest
  1. No evidence of data taken out and no misuse or other secondary harm found as of the third notice
  2. Changed server passwords still in use that may have been affected, and asked VPS customers to change initial admin passwords
  3. Third notice with the investigation results: 951 Rental Server accounts; sales management system accessed from April 2023 to March 2026
  4. Added a phone line only for this incident at 10:00 JST
  5. Second notice: unauthorised access to the sales management system; up to 1,360,563 member accounts may be affected
4 more
  1. By the first notice, began emailing the customers who may be affected
  2. By the first notice, reported to the Ministry of Internal Affairs and Communications and the Personal Information Protection Commission
  3. First notice: unauthorised logins to 583 Rental Server accounts; customer data may have been viewed or taken
  4. By the first notice, revoked credentials, blocked access and took other containment steps
Company
Sakura Internet
When it happened
Company detected it
Made public
Notice
Possible leak
Affected
1,360,563 member accounts at most, incl. 951 Sakura Rental Server accounts · possible leak; company notice

Sources