Japan Did Not Declare a Cyber Emergency; Ransomware at IDC Frontier Hit 495 Clients

No formal cyber emergency was declared in Japan, despite headlines suggesting otherwise. A politician described the situation as an emergency at an October 9 party meeting, but no legal order was issued. The government's notice that day was a checklist for companies, and officials said it was unclear whether the incidents were linked or whether AI had been misused. The real impact came from ransomware at IDC Frontier, a SoftBank-owned cloud provider, which halted servers for 495 companies and local governments on October 7. Only 206 of those clients recovered their data from backups they had kept themselves, with extraction starting ten days after the attack, and the final report traced the intrusion to a vulnerability in open source login software.