[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKVGBKeao1puu-ixUcdkNoUg3JAMjIu6nd7nARVe0LCc":3},{"article":4,"iocs":50,"watch_terms":51,"solutions":52,"lesson":142},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":27,"category":28,"article_tags":32},"9b17de38-8ad3-4b21-a30d-26a10c525142","Ransomware attack disrupts Japan's IDCF Cloud used by govt clients","ransomware-attack-disrupts-japan-s-idcf-cloud-used-by-govt-clients-82ee7a","IDC Frontier, a major Japanese cloud and digital infrastructure company, disclosed that its IDCF Cloud service was targeted in a ransomware attack that caused an outage at a data center cluster serving the eastern part of the country. [...]","IDC Frontier's IDCF Cloud service in Japan was hit by a ransomware attack, leading to an outage in its East Japan Region 1 data center cluster. The attack, which began on October 7, forced a shutdown of affected systems, impacting 495 companies and local governments. The threat actor claims to have encrypted 3.6 PB of data and compromised numerous virtual machines and snapshots.","Ransomware attack hits Japan's IDCF Cloud, impacting government clients and causing data center outages.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fransomware-attack-disrupts-japans-idcf-cloud-used-by-govt-clients\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F08\u002F10\u002Fcloud.jpg","2026-10-08T20:09:45+00:00","2026-10-08T22:00:23.430223+00:00",8,[17,20,22,25],{"name":18,"type":19},"IDC Frontier","vendor",{"name":21,"type":19},"SoftBank Group",{"name":23,"type":24},"IDCF Cloud","product",{"name":26,"type":19},"Nissui Corporation","7d8b5ab8-ea0b-4ced-ae97-ec251b86993a",{"id":27,"icon":29,"name":30,"slug":31},null,"Ransomware","ransomware",[33,38,43,45],{"category":34},{"id":35,"icon":29,"name":36,"slug":37},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":39},{"id":40,"icon":29,"name":41,"slug":42},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":44},{"id":27,"icon":29,"name":30,"slug":31},{"category":46},{"id":47,"icon":29,"name":48,"slug":49},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,21,26],{"controls":53,"vendors":141},[54,83,112],{"slug":55,"name":56,"problem":57,"products":58},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[59,67,75],{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":63,"product_name":64,"url":65,"description":66},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"slug":84,"name":85,"problem":86,"products":87},"immutable-backup","Immutable backup and recovery","Ransomware cannot delete or encrypt your way back.",[88,96,104],{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"rubrik","Rubrik","\u002Fvendor-logos\u002Frubrik.png","zero-trust-data-protection","Rubrik Zero Trust Data Protection","https:\u002F\u002Fwww.rubrik.com\u002Fproducts\u002Fdata-protection","Air-gapped, immutable backup for on-premises, cloud and SaaS data, with threat detection in backups and orchestrated recovery.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"commvault","Commvault","\u002Fvendor-logos\u002Fcommvault.png","commvault-cloud","Commvault Cloud","https:\u002F\u002Fwww.commvault.com\u002Fplatform","Backup and recovery platform with immutable storage and recovery testing.",{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"veeam","Veeam","\u002Fvendor-logos\u002Fveeam.png","veeam-data-platform","Veeam Data Platform","https:\u002F\u002Fwww.veeam.com\u002Fproducts\u002Fveeam-data-platform.html","Backup and recovery for virtual, physical, cloud and SaaS workloads, with immutable storage options.",{"slug":113,"name":114,"problem":115,"products":116},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[117,125,133],{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","incident-response","CrowdStrike Incident Response","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Fincident-response\u002F","Incident response services, available on retainer.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","mandiant-incident-response","Mandiant Incident Response","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fconsulting\u002Fmandiant-incident-response-services","Incident response services from Mandiant, available on retainer.",{"vendor_slug":134,"vendor_name":135,"vendor_logo":136,"product_slug":137,"product_name":138,"url":139,"description":140},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","unit-42-retainer","Unit 42 Retainer","https:\u002F\u002Fwww.paloaltonetworks.com\u002Funit42\u002Fretainer","Incident response retainer with Unit 42, including preparation services.",[],{"slug":143,"title":144,"body":145,"framework_refs":146,"framework_notes":160},"ransomware-encrypts-36-pb-of-cloud-data-across-495-japanese-government-and-corporate-clients","Ransomware Encrypts 3.6 PB of Cloud Data Across 495 Japanese Government and Corporate Clients","A ransomware attack on IDC Frontier's IDCF Cloud service demonstrates the catastrophic downstream impact when a managed cloud provider is compromised — a single breach cascades to hundreds of government and enterprise clients simultaneously. The encryption of 3.6 petabytes of data, including virtual machines and snapshots, suggests that backup and recovery mechanisms were either insufficient, improperly isolated, or were themselves within the blast radius of the attack. This matters because cloud-hosted snapshots are only a resilience tool if they are stored in immutable, air-gapped environments that ransomware cannot reach. Government clients face additional risk as disrupted services can affect public safety, administrative continuity, and citizen data. Incidents of this scale underscore that shared infrastructure creates shared risk, requiring both providers and tenants to maintain independent recovery postures.",[147,148,149,150,151,152,153,154,155,156,157,158,159],"CIS Control 11 – Data Recovery","CIS Control 12 – Network Infrastructure Management","CIS Control 13 – Network Monitoring and Defense","NIST SP 800-53 CP-9 – System Backup","NIST SP 800-53 CP-10 – System Recovery and Reconstitution","NIST SP 800-53 SI-3 – Malicious Code Protection","NIST SP 800-53 SC-7 – Boundary Protection","NIST Cybersecurity Framework – RC.RP (Recovery Planning)","ISO\u002FIEC 27001 – A.12.3 Information Backup","ISO\u002FIEC 27001 – A.16.1 Management of Information Security Incidents","GDPR Article 32 – Security of Processing (data integrity and resilience)","GDPR Article 33 – Notification of Personal Data Breach","ITIL – Service Continuity Management",{}]