A ransomware attack on SoftBank subsidiary IDC Frontier knocked out a major slice of Japan’s public-facing internet on Wednesday, leaving home pages for prefectures, cities and businesses unreachable or frozen in place. The company said 495 corporate and municipal customers on its IDCF Cloud platform were affected after an intrusion triggered an automatic shutdown in an eastern Japan data center at about 3:40 a.m.
IDC Frontier isolated the East Japan Region 1 environment from the wider network and halted systems to block further encryption or data theft, according to a second bulletin posted Wednesday. Engineers were still tracing the entry path while checking whether other regions remained safe; management consoles outside the hit zone were temporarily disabled until reviews finished.
Local governments scramble for workarounds
Among the most visible casualties were local government portals that residents use for forms, event calendars and public notices. Ibaraki Prefecture, northeast of Tokyo, said it could not serve downloadable documents for applications and was fielding phone calls instead after SoftBank alerted officials that servers in an eastern data center had powered down around 4 a.m. Tochigi Prefecture reported its event calendar was unavailable, and Kodaira, a western Tokyo suburb, acknowledged its city site could not be viewed from Wednesday morning.
Police sites tied to the same hosting chain were also reported offline in national media, complicating routine disclosures at a moment when Japanese companies are already reeling from a separate wave of corporate data breaches. IDC Frontier did not publish a client list, but news agencies confirmed disruptions at venues ranging from Tobu Zoo in Saitama Prefecture to the Jiji Press newswire’s own web operations.
Contracting footprint and recovery steps
IDCF Cloud runs across three independent eastern regions and a western Japan region; Wednesday’s failure was confined to one eastern cluster, the vendor said. That architecture limited the blast radius but still paralyzed hundreds of tenants that had concentrated production sites in the affected zone.
SoftBank’s unit said it was building an alternate environment to restore service while forensic teams examined encrypted systems. Customers were being contacted individually, and the company pledged further updates as containment work progressed. Chief Cabinet Secretary Minoru Kihara told reporters Tuesday that the government was tracking a broader pattern of cyber intrusions against Japanese industry, though IDC Frontier’s incident was the most disruptive single cloud failure of the week.
What tenants face on Thursday
For municipalities, the outage arrived just as autumn vaccination campaigns, disaster drills and school enrollment windows rely on online forms. Corporate tenants risked stale pricing pages and broken e-commerce flows during a retail week bookended by public holidays. Cyber insurers and systems integrators said many affected organizations would need to decide whether to fail over to backup regions or wait for IDC Frontier’s rebuilt stack.
Tokyo markets showed little immediate reaction in SoftBank Group shares, but technology analysts said the episode would renew scrutiny of concentrated cloud hosting for critical government services. IDC Frontier gave no estimate for full restoration as of Wednesday evening Japan time, warning that safety checks on unaffected regions could prolong console lockouts even after the primary data center returns.