[ITmedia News] IDCF cloud failure, customer data “difficult to retrieve and restore” Restoration relies on customer backup

On October 8, IDC Frontier announced that part of the East Japan Region 1 of its cloud service IDCF Cloud has been suspended due to a ransomware attack, and that it is expected to be difficult to retrieve and restore customer data stored on the affected servers. ``Data can only be restored from backup data held by the customer.''

The target areas are ``Tesla'', ``Henry'', ``Pascal'', and ``Joule'', and the customers are 495 companies and local governments. The problem continued from around 3:40 a.m. on the 7th. The virtual server has stopped and cannot be restarted.

The company is guiding users of the four zones to prepare a separate environment and rebuild, but when it comes to restoring data, ``we are instructing customers to use the backup data they have.''

Although we have not confirmed any unauthorized access at this time in areas other than the four targeted zones ("Radian" and "Newton" zones in East Japan Region 1, East Japan Region 2, East Japan Region 3, and West Japan Region 1), we are also instructing these users to back up their own data and providing information on how to do so.

Since the management console for users is no longer available, the company handles tasks such as starting and stopping virtual servers upon request. Management consoles in regions other than East Japan Region 1 will be restarted once safety has been confirmed.

The failure due to unauthorized access occurred in the early hours of the 7th. The company has cut off East Japan Region 1 from its network to prevent secondary damage and data leaks. Collaborate with external security specialist companies to identify intrusion routes. We are continuing to investigate the networks, servers, storage, etc. that make up each region in eastern and western Japan. The detailed scope of impact and intrusion route are under investigation.