Zaif Adopts 'Rubrik Security Cloud' to Strengthen Cyber Resilience for Crypto Assets

Rubrik Japan Co., Ltd. (Headquarters: Minato-ku, Tokyo; Representative Director and President: Yuki Takayama), the Japanese subsidiary of Rubrik (Headquarters: Palo Alto, California, USA; CEO: Bipul Sinha), a leader in security and AI operations, announced that Zaif Co., Ltd. (hereinafter Zaif), which operates 'Zaif,' a crypto asset exchange with a long history in Japan, has adopted 'Rubrik Security Cloud (RSC).' Zaif is utilizing RSC, a zero-trust based data protection platform, to enhance its cyber resilience. By implementing measures that assume potential breaches from cyberattacks, it is possible to continuously ensure the accuracy and availability of customer asset data, which is the foundation of a crypto asset exchange.

Cyberattacks are becoming more sophisticated day by day. If recovery of customer asset data is delayed in the event of an attack, there is a significant risk that could seriously impact the business continuity of a crypto asset exchange. Meanwhile, in recent years, crypto assets have increasingly become an investment target, with the number of account openings at crypto asset exchange service providers in Japan exceeding 13 million and user deposit balances surpassing 5 trillion yen (*1). Consequently, from the perspective of user protection, changes in regulatory compliance are expected, including a shift from the current Payment Services Act to the Financial Instruments and Exchange Act. This will necessitate the establishment of stricter security systems and internal controls.

Amidst this, Zaif, which operates its systems on the AWS cloud, felt the limitations of traditional perimeter defenses and backup-based security measures against modern identity attacks that steal legitimate credentials for impersonation and intrusion. In particular, they were concerned about the characteristic of cloud environments where all data, including backup data, could be deleted if administrator privileges were seized, feeling the necessity for data protection that assumes post-intrusion scenarios.

As a result of their consideration, the company decided to introduce Rubrik Security Cloud (Rubrik Cloud Native Protection and Rubrik Cloud Vault), which features a 'logical air gap' that protects data in a unique environment and 'immutable data backup' that prevents changes even with administrator privileges. Furthermore, they also decided to adopt 'Anomaly Detection,' which quickly detects suspicious behavior lurking within backup data on AWS, and 'Threat Hunting,' which scans for malware traces to identify safe recovery points. This enables rapid identification of initial intrusion points and affected areas in the event of an infection, ensuring reliable recovery from 'clean data.' Additionally, the existence of a 24/7 ransomware recovery support service from the RRT (Ransomware Response Team) of technical experts was a significant factor in their decision.

Natsuki Sako, Head of Product Planning and Development Department at Zaif, stated:

"In pursuing data protection that assumes breaches, what we valued most was Rubrik's mechanism that 'prevents intentional deletion even by administrators.' With traditional backups, the backup itself is jeopardized if administrator privileges are compromised, but Rubrik retains data in an immutable state, designed to be inaccessible directly from our environment. We were convinced that even in the worst-case scenario where attackers gain control of the AWS environment, backups would remain untouched, ensuring our data is protected. This was a major factor in our adoption."

Yuki Takayama, Representative Director and President of Rubrik Japan, commented:

"Security going forward will focus on how well we can prepare for potential risks. We are extremely honored to work with Zaif to protect the future of crypto assets. The adoption of Rubrik Security Cloud has enabled Zaif to move beyond a traditional defense-centric approach and build a more advanced security system. In today's constantly threatened world, a zero-trust mindset centered on resilience is indispensable, and rapid recovery is not just a security measure, but the very foundation for business continuity."

Zaif underwent verification in a test environment from January 2026 and is currently proceeding with implementation in the production environment. Moving forward, they will continue to work with Rubrik in response to changes in cyberattacks and ransomware threats.