Breaches and incidentsBriefReported by a reputable outlet, citing the company
GMO Internet (Onamae Desktop Cloud): VPS platform intrusion, JPY 8 billion ransom refused, data posted, up to 26,739 customer servers at risk
GMO detected the intrusion on 20 Oct and told customers to disconnect and shut down their PCs; up to 26,739 customer servers could have had malware installed.
- Disclosed
What happened
- GMO detected the intrusion on 20 Oct and told customers to disconnect and shut down their PCs; up to 26,739 customer servers could have had malware installed. The attacker published company and customer data; MetaTrader 4/5 credentials and trading-account details may be exposed. GMO refused the JPY 8 billion (about $50M) demand and will pay each customer JPY 5,000.
- Root cause: not disclosed.
- Unnamed actor; the threatened ransomware payload apparently was not triggered.
- Working with Trend Micro; servers shut down.
Sources
- https://www.bleepingcomputer.com/news/security/japans-gmo-urges-customers-to-shut-down-pcs-amid-ransomware-threat/
- https://techcrunch.com/2026/10/27/japan-internet-giant-gmo-says-hackers-posted-stolen-customer-data/
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.