Sakura Internet Breach May Have Gone Undetected for Over Three Years

Japanese cloud provider Sakura Internet has issued a third report on its breach, and an outside security probe found the intrusion may have persisted for over three years. The weight here isn't being hacked — it's going three years without noticing. Security people track a brutal metric called dwell time: how long attackers stay before detection. The longer they linger, the more data they exfiltrate and the deeper the backdoors. Over three years means the defenses were effectively blind for that whole span — a trust-shattering failure for a company hosting large volumes of customer systems. The practical point for readers: hosting your systems with a cloud provider ties your security to their detection ability, so 'how fast they spot anomalies' matters as much as uptime when picking a vendor. Watch the disclosed scope and customer impact — a three-year breach takes a long time to fully tally.