Around 3:40 a.m. on Wednesday, an automatic shutdown system inside a data center in Shirakawa, a city in Japan’s Fukushima prefecture, sensed something wrong and cut the network. By morning, the websites of a prefecture government, its police headquarters, a zoo and a news wire had gone dark. The cause, IDC Frontier would later confirm, was a ransomware attack.
IDC Frontier, a Tokyo subsidiary of SoftBank Group, said unauthorized access from a third party disrupted part of its IDCF Cloud service, which hosts websites and systems for Japanese companies and local governments. The outage hit the company’s eastern Japan Region 1 and then spread in its consequences: Ibaraki Prefecture, its prefectural police, the Tokyo suburb of Kodaira, Tobu Zoo in Saitama and the Jiji Press news agency all reported that their sites could not be viewed or updated. By evening, IDC Frontier said 495 businesses and government bodies were affected.
The company has said little about how the attackers got in. It confirmed to reporters that the intrusion was a ransomware attack, and it blocked the service network to prevent secondary damage and data leaks. Whether any customer data was stolen or encrypted remains under investigation, and some customers have told their users that restoring data may be difficult.
The list of casualties shows how far a single cloud failure travels. Greenwich, an e-commerce support provider, said its inventory and pricing tools stopped working. Six Apart, the company behind the Movable Type content-management system, said 31 servers in the affected region lost access. A commission service for illustrators and a voice-transcription app both told users that restoring their data might be hard. Each had made the same bet: that renting from a large domestic cloud was safer than running its own servers.
The episode exposed how tightly Japan’s public systems depend on a small number of cloud providers. IDCF Cloud spans 15 zones across eastern and western Japan and markets itself as a domestic alternative to the American hyperscalers, a selling point for government agencies that prefer their data to stay on home soil. When one region in Fukushima went down, a long list of services with little in common stopped working at once, because they all rented servers from the same place.
That concentration is the uncomfortable fact behind the outage. Japan has steered public-sector clients toward domestic clouds for reasons of sovereignty and security, but the same logic that keeps data at home also gathers it in a handful of facilities. One compromised data center can take down a prefecture’s website and a professional soccer club’s homepage in the same morning.
The attack fits a pattern Japanese operators have been slow to acknowledge. Ransomware gangs have hit manufacturers, hospitals and ports across the country in recent years, and public-sector bodies have been among the most common targets because their defenses tend to lag and their incentive to pay is high. A cloud provider that hosts hundreds of those bodies at once is, in that sense, a single point of failure an attacker can reach through one set of doors.
The timing adds to the strain. IDC Frontier has been reorganizing. In April it transferred its data center business and the customer contracts for its cloud and network services to its parent, SoftBank, leaving the operating company to run the technology. Analysts said the restructuring does not change the exposure, because the servers and the responsibility for them remain in the same hands.
For SoftBank, the incident lands on a conglomerate already carrying enormous ambitions, and debt, around AI. The group has poured money into chips and data centers and has tied itself closely to OpenAI through joint ventures and its role in the Stargate project. An outage at a subsidiary, even a modest one by global standards, is the kind of small failure that can erode the trust of the government clients domestic clouds exist to win.
IDC Frontier has said it is building an alternative environment while it investigates, and it has paused the management consoles for its other regions as a precaution while it checks them for the same breach. The company told affected customers individually and promised to disclose new facts as they emerge.
What it has not yet disclosed is the harder question: how long recovery will take, and what the attackers took. Ransomware gangs typically claim they have copied data before locking systems, and social media circulated images of a claim tied to the attack, which the company said it was checking. Until IDC Frontier says what happened to the data, the shutdown is only the visible part of the damage.
For Japan, which has spent years trying to build a homegrown cloud industry as a matter of economic security, the episode is a hard lesson in the cost of that bet. Domestic does not mean immune.
