IDCF Cloud Ransomware Hits Japanese Gov Clients
IDC Frontier confirmed a ransomware attack took down an IDCF Cloud data center cluster serving government and enterprise clients in Japan.
Morgan "airgap" ReyesRansomware hit IDCF Cloud on or before October 8, 2026. IDC Frontier, a Japanese cloud and digital infrastructure provider, confirmed the attack caused an outage at a data center cluster. Government clients are affected.
Source: BleepingComputer, October 8, 2026.
Attacker identity: unconfirmed as of publication. No group has publicly claimed the attack. Data exfiltration status: unconfirmed. Recovery timeline: not stated by IDC Frontier.
IDCF Cloud is IDC Frontier’s managed cloud platform serving enterprise and public-sector customers in Japan. The exact scope of affected government services is not yet disclosed.
Japan has been hit by a string of ransomware incidents in 2026. Keio Railway confirmed an attack in late September that disrupted operations. Ransomware operators have also targeted cloud and infrastructure providers outside Japan, including Warlock, which hit water and telecom systems via SharePoint in early October.
Analysis: cloud platforms with government tenants are an increasingly common ransomware target. Whether IDCF Cloud was selected as a high-value target or caught as part of opportunistic network access is unconfirmed.
Updates will follow as IDC Frontier releases additional information.
Found this useful? Share it.
