Japan's Onamae Desktop Cloud Hacked, Up to 27,000 Servers Affected
Hackers compromised Onamae Desktop Cloud, a popular VPS provider in Japan, affecting up to 27,000 servers. The company shut down affected servers and advises customers to rotate passwords.
Intelligence analysis by Qwen 2.5 (3B)

Hackers breached Onamae Desktop Cloud, a Japanese VPS provider, compromising up to 27,000 servers. The company has shut down affected servers and advises customers to rotate passwords.
Hackers broke into a Japanese cloud service and put malware on some servers. The company says up to 27,000 servers were affected. They told people to change their passwords to stay safe.
Analysis
{"heading":"The Onamae Desktop Cloud Breach","subheading":"Details and Impact","paragraph_1":"Onamae Desktop Cloud, a popular VPS provider in Japan, was compromised by hackers. The breach affected up to 27,000 servers, with malware installed on some customer environments.","paragraph_2":"The company, operated by GMO Internet, confirmed that unauthorized access by a third party occurred and that malicious programs were installed in some customer environments.","paragraph_3":"The breach may have exposed data stored on the impacted servers, though the company has not confirmed any misuse of the data. Payment information is not affected because it is stored on a different infrastructure.","paragraph_4":"The company shut down affected servers starting at 04:00 local time on October 21, 2026, and advises customers to rotate their passwords as soon as possible. They also warn of an increased risk of phishing emails and other unsolicited communications.","paragraph_5":"The Blue Report 2026, a measure of defenses across 338 million simulations, shows that once attackers have valid credentials, prevention drops sharply. The report highlights the importance of strong password practices and the risks of compromised credentials."}
Key points
- Hackers compromised Onamae Desktop Cloud, a Japanese VPS provider
- Up to 27,000 servers were affected by the breach
- The company advises customers to rotate their passwords
- Payment information is not affected because it is stored on a different infrastructure
- The Blue Report 2026 shows that once attackers have valid credentials, prevention drops sharply
The breach may have exposed data, but the company has not confirmed any misuse. This highlights the importance of strong password practices.
If the hackers did misuse the data, it could cause problems for customers. The breach also shows the risks of using compromised credentials.



