Updated
Updated · TechCrunch · Oct 27
GMO Internet Probes Onamae Breach After Data Linked to 27,000 Servers Is Posted
Updated
Updated · TechCrunch · Oct 27

GMO Internet Probes Onamae Breach After Data Linked to 27,000 Servers Is Posted

3 articles · Updated · TechCrunch · Oct 27

Summary

  • GMO Internet said a suspected attacker posted information appearing to be tied to the company and Onamae customers, though it is still verifying whether the leaked data is genuine.
  • 27,000 servers may be affected by the breach, and GMO has told customers to reset passwords after reports of unauthorized operations on trading accounts using its cloud desktop service.
  • An Oct. 21 intrusion forced GMO to shut down Onamae Desktop Cloud, and the hackers then demanded about 8 billion yen, or roughly $50 million, according to the company’s timeline.
  • Japan’s Financial Services Agency said it had already urged financial firms in May to strengthen basic cyber defenses, while GMO separately has not linked this breach to the Artex hacking tool recently seen in attacks across Japan and South Korea.

Insights

Did hackers breach GMO’s trader cloud through weak authentication—and how many of the 27,000 affected servers were actually compromised?
Is the Onamae breach a warning that AI-assisted attacks are exposing deeper security flaws in Japan’s cloud trading infrastructure?
Why did GMO refuse an extortion demand after unauthorized trades surfaced, and what damage could leaked but unverified data still cause?