The servers went dark first.
On October 7, 2026, systems belonging to 495 companies and local governments stopped answering at once. Nobody had broken into 495 networks overnight. Someone had broken into the one cloud they shared. IDC Frontier, a SoftBank group provider, confirmed ransomware in its East Japan Region 1 and shut the management consoles in its other regions before the damage could spread.
Then came the message. The intruder left it on the console, and it read like a receipt. Seven minutes, it claimed, had been enough to get in. From there it said it reached 239 hypervisors, sealed 16,000 virtual machine disks, and erased 554,153 snapshots. Every figure is the attacker's own boast and none has been verified. The snapshots were the line meant to frighten, because they were the copies customers believed would bring them back.
The next day the provider answered the question every customer was asking. Data in four affected zones would be difficult to retrieve or restore, and customers should rebuild from their own backups. Many of them had handed their systems to a provider precisely so someone else would hold the way back. Now the way back was theirs again, and the attacker had already walked through it.
That is where the suspense ends and the pattern begins, because nothing about this was new. It was the shape of Japan's entire threat landscape drawn in a single week.