EXPLORINEER
en

JP — ITmedia

GMO Chairman Kumagai Apologizes Again at Press Conference, Says Social Media Posts "Lacked Consideration"

Security3 min read

GMO Internet Group's CEO Masatoshi Kumagai apologized again at a press conference on November 2, 2026. The apology was about a hacking attack on a FX (currency trading) cloud service and about his social media posts.

CEO apologizes at a press conference

GMO Internet Group CEO Masatoshi Kumagai held a press conference on November 2 about unauthorized access to 'お名前.com デスクトップクラウド' (Onamae.com Desktop Cloud). This is a virtual computer service used for automatic FX trading. He said, 'We were not able to protect our customers, and I am truly sorry.' The group had announced the hack on October 21. This was the first press conference the group had held since then.

Key facts

  • The hack was announced on October 21, 2026.
  • Customer information was leaked, and customers' assets were also damaged.
  • Kumagai admitted the service's system had a security problem.
  • An expert at GMO Cybersecurity by Ierae had pointed out problems with the system, and Kumagai said this warning was not used in running the service.

What led to the apology

The hack hit a service used by people who trade currencies with automatic programs. Kumagai also posted on social media during this time. He later said those posts were not careful enough toward the victims. The posts included a message about a case affecting victims, a smiling photo posted during the crisis, and a comment to a person who had posted about the company's track and field team.

Why it matters

Customers lost money and had their personal information exposed. The company also had warnings about weak security before the attack. Many people also criticized the CEO's posts as unkind to victims. The press conference shows the company is trying to take responsibility, but the full details are still being reported.

What to watch

  • Full details of the press conference, which ITmedia NEWS said it would report later.
  • Compensation for losses from the unauthorized trades, including a condolence payment of 5,000 yen as reported in related articles.
  • Whether the Ministry of Internal Affairs and Communications asks telecom companies to block the attackers' websites.
  • Results from the analysis of devices collected by GMO.

Glossary

GMO Internet Group
A large Japanese internet company group that runs web hosting, domains, and online services.
FX
Foreign exchange, which means trading one country's money for another's.

Ad

Add 150 words. Learn 10 a day.

Dicter word books send only the words you learn to your review notes.

Securityheise online

Attacks Exploiting Flaws in Drupal, Ivanti Connect Secure and Synology Are Ongoing

Attackers are actively exploiting vulnerabilities in Drupal Commerce Core, Ivanti Connect Secure and Synology DSM to compromise systems, and several organizations have issued warnings. The Drupal flaw allows access control bypass and is being attacked, with fixes in Commerce Core 3.3.13 or 8.x-2.41 and later. Ivanti has issued additional patches for chained flaws, and Synology warns that ransomware gangs are targeting outdated DSM versions that lack fixes from December 2024.

Security전자신문

KISIA Promotes Cybersecurity Tech Exchange with Indonesia to Support Korean Firms' Market Entry

The Korea Information Security Industry Association (KISIA) said it is expanding local cybersecurity exchanges and cooperation to help Korean security firms enter the Indonesian market. KISIA took part in the SuSEC 2026 conference in Jakarta from the 13th to the 15th of last month, co-hosted by LS Ware and state-owned SUCOFINDO, with more than 200 attendees including government, military, and public sector officials. A consortium including LS Ware is jointly developing an intelligent zero-trust-based integrated threat detection and response platform tailored to Indonesia's security environment.

SecurityITmedia

Rakuten Securities may have leaked data on 362 customer records; unauthorized access hit NTT Data subcontractor

Rakuten Securities announced on October 31 that information on a total of 362 records of some customers who bought "digital benefit bonds" may have leaked. The leak was tied to unauthorized access by a third party to a system provided by an NTT Data subcontractor, which NTT Data says has since been suspended. The affected customers will be contacted individually, and the investigation into the intrusion route is ongoing.

SecurityITmedia

Nico Nico Rent-a-Car Ends Advance Registration of Driver's License Images and Deletes All Stored Images Amid Rising Cyberattacks

Rental car chain Nico Nico Rent-a-Car, operated by Rentas, announced on October 27 that it is discontinuing the advance registration of driver's license images in its official app "Nico Pass." Customers booking through the app must now show their license at the store counter on the day of rental for staff verification. Rentas said the change is meant to strengthen personal information protection amid increasing cyberattacks, that it has deleted all previously stored license image data, and that it has not confirmed any leaks as of October 27.