Onamae Desktop Cloud reportedly shuts down all plans after intrusion

Customer servers progressively shut down from October 21

BleepingComputer reported that attackers compromised Onamae Desktop Cloud infrastructure and installed malware on up to 26,739 customer servers. The company said on October 20 that an unauthorized third party had accessed the service and installed unauthorized programs in some customer server environments. It said it began progressively shutting down servers on October 21.

The available report does not provide a comparable pre-incident operating measure for the same service.

The company says it began progressively shutting down customer servers at 04:00 local time on October 21, affecting all Desktop Cloud plans. It gave no estimated service-restart date.

The reported incident combines a possible large number of affected customer servers with a service-wide interruption. The company said data on impacted servers may have been exposed, though it had not confirmed misuse or leakage.