Ransomware Hits SoftBank's IDC Frontier, Disrupting 495 Customers

On October 7, 2026, IDC Frontier, a Tokyo-based company that provides cloud services and is owned by SoftBank, reported a ransomware attack. The IT infrastructure outage affected 495 corporate customers and Japanese local governments. According to The Asahi Shimbun, cybersecurity specialists were still dealing with the incident's aftermath as of October 8. Logistics and e-government services were disrupted.

What is known and what is not yet

The public picture is thin. The company confirmed the ransomware attack itself and its scale: 495 customers. Japanese media name the affected sectors: logistics and government digital services. Nothing more is available publicly.

It is unknown which ransomware family the attackers used or whether they demanded a ransom. It has not been disclosed whether customer data was stolen or whether the encryption was limited to the provider's own infrastructure. There is also no estimate for when full recovery will be complete. These gaps matter: they determine whether the incident stays an operational outage or grows into a data breach.

• Company: IDC Frontier Inc., Tokyo, cloud services and data centers
• Owner: SoftBank
• Date the attack was reported: October 7, 2026
• Attack type: ransomware (file-encrypting malware)
• Affected: 495 corporate customers and local governments
• Affected sectors: logistics, e-government services
• Status as of October 8: investigation and recovery ongoing

Why an attack on a provider is worse than an attack on a single company

When ransomware gets into a cloud operator's infrastructure, it hits everyone who runs on it at once. One entry point turns into hundreds of outages. The customers did nothing wrong: their own systems may have been perfectly secured, but they simply have nothing to run on.

The industry has seen similar cases. In 2022, an attack on hosting provider Rackspace knocked out its hosted Exchange email service. In 2024, ransomware paralyzed CDK Global, a software vendor for car dealerships in the US, and thousands of dealerships went back to paper. In Japan in 2023, an attack on the Port of Nagoya's system shut down a container terminal. The logic is the same every time: the more processes depend on a shared platform, the higher the cost of its failure.

The case is also telling for Japan because municipalities are among the victims. Government services are increasingly hosted with commercial cloud providers, and the resilience of that arrangement is set by the weakest link in the chain of contractors.

Data centers are in the spotlight for another reason, too. SoftBank is investing heavily in AI infrastructure, and training and inference workloads are moving into the same clouds and colocation facilities where business and government already operate. The denser this infrastructure becomes, the higher the stakes for protecting it.

What teams that depend on the cloud should check

The trigger for a review is not just this incident but the nature of the risk itself. A minimal set of questions for your own IT architecture looks like this.

• Are backups stored outside the main provider's infrastructure and disconnected from the network (offline or immutable storage)?
• When did you last test a full restore from backup, with real recovery time measured?
• Is there a manual emergency procedure for critical operations, such as shipments or accepting applications, in case of several days of downtime?
• What does the contract with the provider say about incident notification deadlines and compensation?
• Are critical services spread across independent sites or providers, rather than only across zones of a single operator?
• Are administrative accesses protected with multi-factor authentication, and are privileges separated?

Separately, it is worth deciding in advance who in the company makes decisions when a contractor fails and how customers will learn about the problem. The first hours of downtime usually go to working out who is responsible for what. How the IDC Frontier story develops will show how quickly the provider restored services and whether customer data was affected.