Onamae.com Desktop Cloud, a prominent provider in Japan, has taken the unprecedented step of shutting down its services after detecting malware in customer server environments. The decision, announced following the discovery on October 20, 2026, affects all service plans, leaving users without access to their servers.
Scope of the Incident
The company has identified up to 26,739 servers that could be potentially affected by the malware, although this figure does not confirm the exact number of infected systems. The shutdown began early on October 21 to prevent further damage, but no restart date has been provided to customers, who are now left in a state of uncertainty regarding their data and login credentials.
While Onamae has confirmed that malware was found in some server environments, it has not released specific details about the type of malware or how the breach occurred. The lack of information on the attack chain has left many questions unanswered, adding to the concerns of those affected.
Customer Impact and Security Measures
This shutdown impacts all Onamae.com Desktop Cloud plans, not just those with confirmed malware presence. Customers are unable to access their servers, and the company has not specified which files, accounts, or applications might be affected. Furthermore, there is no confirmation on whether any data has been exfiltrated.
Onamae has assured customers that personal information it holds has not been leaked, and payment information like credit card details is not stored. Despite these assurances, the company urges customers to change all login credentials used on their servers as a precaution against potential exposure.
Ongoing Investigations and Recommendations
The technical details of the breach remain scant, with no identified entry point or attacker. Onamae has not confirmed whether the malware was used to steal passwords or enable unauthorized remote access. Customers are advised to remain vigilant against phishing attempts as the company warns against any emails requesting sensitive information.
Phishing attempts often exploit security incidents, and Onamae has reminded customers that it will never ask for passwords or financial details via email or phone. Users are also encouraged to update defenses and integrate threat intelligence feeds to prepare against new malware threats.
As the investigation continues, customers must take proactive steps to secure their accounts and remain cautious of suspicious communications. The incident underscores the critical importance of maintaining robust cybersecurity measures and staying informed about potential threats.
