Security LabInspect with AI
← Incident database

sakura-billing-2026 · Disclosed 2026-08-19

Sakura Internet: separate billing-database intrusion

Sakura disclosed billing-database access spanning April 2023 to March 2026 in August 2026, with potential information leakage reported separately from its hosting incident.

Cause unresolved / undisclosedCredentials

Outcome: Confirmed breach

Entry path and evidence

  • Reported fact

    Billing-database unauthorized access was confirmed without an established link to the hosting incident.

    [s1]4.(2) 販売管理システム / 4.(3) 認証情報
  • Reported fact

    Potential exposure covers 1,360,563 accounts and some initial passwords, not all current passwords.

    [s1]5. 影響を受けた可能性のある情報

Timeline

  1. Incident disclosed. [s1]

Reported response

  • Reported fact

    Sakura reported initial-password invalidation or change measures and stronger access control and monitoring.

    [s1]7. お客さまへの対応 / 8. 封じ込め / 9. 再発防止策

Cause and mitigation hypotheses

Not assessed. Editorial hypotheses have not been added for this incident; this does not establish safety or a confirmed cause.

Evidence relevant to prevention

Insufficient evidence

The entry cause remains unknown; inspect the need, storage format, retention, and access control for initial credentials.

Editorial assessment; not a determination of liability. [s1]

Unknowns and AI involvement

AI involvementUnknown

The cited sources do not establish attacker use of AI; absence of evidence is not evidence of absence.

Intrusion timing is disclosed only by month; account overlap prevents adding the two incident counts.

Sources

  1. [s1] さくらインターネット · Primary source

    当社システムへの不正アクセスに関する調査結果および再発防止策について（第三報） ↗

    Published 2026-09-10 · Reviewed 2026-10-09