Overview
On the rental servers, 951 accounts may have been viewed or taken (malware was planted). In the sales system, 1,360,563 member accounts may have been viewed or taken, 30 of them with hashed passwords; some unhashed initial server and VPS admin passwords were also stored there. Access to the sales system took place between April 2023 and March 2026; the first public disclosure is recorded as August 17, 2026. No link between the two intrusions was established.
Timeline
- Occurred
- Discovered
- Disclosed
Organization response
Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.
What you can do
Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.
Sources
- 当社システムへの不正アクセスに関する調査結果および再発防止策について（第三報）さくらインターネット株式会社 · 2026-11-09
- 当社レンタルサーバーサービスの一部環境に対する不正なアクセスについてさくらインターネット株式会社 · 2026-11-09