Results of Investigation into Unauthorized Access to the Company’s Systems and Measures to Prevent Recurrence (Third Report)
SAKURA internet Inc.
Sakura Rental Server hosting service, sales management system, Sakura VPS virtual private server service, and related internal systems
The specific intrusion routes and technical causes have not been disclosed. Due to constraints on records resulting from the passage of time and other factors, it was not possible to objectively confirm whether they were identical to those involved in this matter or to identify the specific intrusion routes.
No amount was provided for response costs or other related expenses. The impact on consolidated results for the fiscal year ending March 2027 is expected to be limited.
Consolidated results for the fiscal year ending March 2027
No revision to the earnings forecast is planned as a result of this matter.
Company response
Investigation and verification by the Company’s specialist departments and external cybersecurity specialists
Comprehensive review and strengthening of administrator and access privileges; review of connection routes to critical systems and stronger communications restrictions; review of authentication methods and authentication-information management procedures; stronger monitoring, including by expanding the scope of EDR deployment; stronger security settings for administrative servers; stronger multilayered access controls for administrative environments, internal systems, and service delivery environments; expansion of monitoring targets and detection functions for the early detection of unauthorized access; review of the scope of security-log collection, retention periods, and analytical systems; cleanup through rebuilding all servers for the Sakura Rental Server hosting service; regular external audits and third-party assessments; ongoing security education and enhanced incident-response training; stronger information-security governance and reporting systems, including at the management level
The Company will implement measures to prevent recurrence from technical, operational, and organizational perspectives and pursue continuous improvement, treating information security as a key management issue. It will also continue monitoring publicly available information on the internet and whether there has been any unauthorized use.
If any new facts requiring disclosure are identified, the Company will review the details and notify stakeholders promptly.
| Item | Details |
|---|---|
| Event name | Results of Investigation into Unauthorized Access to the Company’s Systems and Measures to Prevent Recurrence (Third Report) |
| Date of occurrence | 9 August 2026 (the date on which an anomaly was detected on a maintenance server for the Company’s rental server service; unauthorized access to the sales management system occurred between April 2023 and March 2026) |
| Date recognized / date notice received | 9 August 2026 |
| Subject Entity | SAKURA internet Inc. |
| Target Locations / Products | Sakura Rental Server hosting service, sales management system, Sakura VPS virtual private server service, and related internal systems |
| Cause | The specific intrusion routes and technical causes have not been disclosed. Due to constraints on records resulting from the passage of time and other factors, it was not possible to objectively confirm whether they were identical to those involved in this matter or to identify the specific intrusion routes. |
| Amount of Impact on Business Performance | No amount was provided for response costs or other related expenses. The impact on consolidated results for the fiscal year ending March 2027 is expected to be limited. |
| Accounting period in which recognized | Consolidated results for the fiscal year ending March 2027 |
| Impact on Earnings Forecast | No revision to the earnings forecast is planned as a result of this matter. |
| Investigation structure | Investigation and verification by the Company’s specialist departments and external cybersecurity specialists |
| Measures to prevent recurrence | Comprehensive review and strengthening of administrator and access privileges; review of connection routes to critical systems and stronger communications restrictions; review of authentication methods and authentication-information management procedures; stronger monitoring, including by expanding the scope of EDR deployment; stronger security settings for administrative servers; stronger multilayered access controls for administrative environments, internal systems, and service delivery environments; expansion of monitoring targets and detection functions for the early detection of unauthorized access; review of the scope of security-log collection, retention periods, and analytical systems; cleanup through rebuilding all servers for the Sakura Rental Server hosting service; regular external audits and third-party assessments; ongoing security education and enhanced incident-response training; stronger information-security governance and reporting systems, including at the management level |
| Outlook | The Company will implement measures to prevent recurrence from technical, operational, and organizational perspectives and pursue continuous improvement, treating information security as a key management issue. It will also continue monitoring publicly available information on the internet and whether there has been any unauthorized use. |
| Planned follow-up disclosure | If any new facts requiring disclosure are identified, the Company will review the details and notify stakeholders promptly. |
Items this document does not state (12)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.Unauthorized access, the installation of malware on servers, and unauthorized access to the sales management system were confirmed. The specific intrusion routes and technical causes have not been disclosed from the standpoint of protecting security and preventing copycat attacks.