Japan cloud breach forces shutdown across up to 26,739 servers
This is a DailyCyber.News update, brought to you by BareMetalCyber.com, for Thursday, October 22nd, 2026.
In Japan, customer workloads stopped after Onamae Desktop Cloud began shutting down servers to contain an intrusion. An unauthorized party installed malicious programs in customer environments, potentially affecting up to twenty six thousand seven hundred thirty nine servers.
Data stored on those systems may have been exposed, although no misuse or leak has been confirmed. Payment card information was stored on separate infrastructure and was not affected.
The shutdown covers every Desktop Cloud plan, and the provider didn’t give a restart date. Customers using the service for continuously running workloads now face both availability and credential risks. Leaders should plan for an extended interruption and the possibility of secondary phishing attempts. Defenders should assume that passwords and other secrets stored on affected servers may be compromised, then inspect the accounts and services connected to those systems.
This is a reminder that provider containment can reduce further harm while still creating serious operational disruption. Rotate secrets stored on affected servers and verify connected accounts before restoring workloads.
For the sources and the full Daily Cyber newsletter, visit DailyCyber.News.
