EXPLORINEER
en

JP — ITmedia

GMO Offers Bounty of About 150 Million Yen for Clues to Unauthorized Access Perpetrators

Security1 min read

GMO Internet Group says it will pay up to $1 million (about 150 million yen) for tips that help solve an unauthorized access attack. The attack hit a cloud server used for automated currency (FX) trading.

What happened

On October 27, 2026, GMO Internet Group announced a reward program. It targets people who hacked "Onamae.com Desktop Cloud," a virtual private server (VPS) run by its subsidiary GMO Internet. Traders use this service for automatic foreign-exchange trades. Anyone in Japan or abroad can send information through a special contact form starting at noon on October 28. The company wants facts that help identify the attackers, their helpers, or the people who gave orders.

Key numbers and facts

  • Total reward pool: $1 million (about 150 million yen).
  • The $1 million is the maximum for the whole program. It is not a payment to each person.
  • Rules for splitting the reward among several helpers will be shared later.
  • The program will continue until the criminals are arrested.

What kind of information is wanted

GMO asks for facts it can check, not guesses or copies of public posts. Useful tips include who the attackers are, where they are, the servers and accounts they used, where the stolen money went, crypto wallet addresses, and records of the attack orders and communications. People who break the law to get information, or who are part of the attack, cannot get a reward. GMO also warns people not to do risky investigations or contact the criminals.

Why it matters

The attack reached a service that people use to trade money, so customers may have lost funds or had their data exposed. GMO hopes the reward will bring in real evidence to solve the case and stop more harm. It also shows how serious the company thinks the crime is.

What to watch

  • Whether the tips lead to arrests.
  • When GMO explains how it will split the reward among helpers.
  • Whether more customers report attacks or lost money.

Glossary

GMO Internet Group
A large Japanese internet company group that runs websites, web hosting, and online services.
VPS
Virtual private server: a rented piece of a powerful computer on the internet, used to run software and websites.

Ad

Add 150 words. Learn 10 a day.

Dicter word books send only the words you learn to your review notes.

SecurityITmedia

So-net Leaks Data of About 2.59 Million Members; Passwords Also Exposed for Some Email Services

Sony Network Communications said unauthorized access to the member database of its So-net internet service led to the leak of about 2.59 million member records, including those of former members who had already left. For some email services, about 54,000 email addresses and their passwords were also leaked, and the company has reset those passwords and asked users to reset them. No credit card information or member passwords were confirmed as leaked, and no secondary damage has been confirmed so far.

Securityheise online

Security: Apple patches many holes again – including for older operating systems

Apple has fixed numerous security vulnerabilities across its operating systems, with over 150 listed in the release notes for iOS 27.2, macOS 27.2 and iPadOS 27.2. Security firm Calif.io, which has been credited several times, also released the first untethered iPhone jailbreak in years for devices up to iOS 27.0.1 and iOS 27.1, and plans to publish the details. Updates for older systems, including iOS 26.7.2, iOS 18.7.11 and macOS 26.7.2 and 15.8.2, are also available.

Security전자신문

[AI Guarding AI] Microsoft Extends Project Perception to Protect Internal AI Agents, Not Just External Threats

Microsoft says AI security must now cover internal AI agents that access enterprise data, tools, and systems, not only external AI-powered attacks. Its Project Perception, unveiled in July, combines signals, security context, models, and specialized Red, Blue, and Green agents into a continuously learning defense system, with humans retaining final control over key decisions. The company also describes "agentic insiders," offers layered protection and dynamic risk scoring, and provides traceability so security teams can monitor agent behavior and adjust policies.

SecurityITmedia

GMO Confirms Attacker Published Information; Investigating Whether Customer Data Is Included, Considering Additional Condolence Payments

GMO Internet Group said that at 12:30 p.m. on October 27 it confirmed the publication, apparently by an attacker, of information that appears to concern customers, related to unauthorized access to its FX auto-trading VPS "Onamae.com Desktop Cloud." The company is still investigating the contents, which may include inaccurate information, and is considering additional condolence payments for affected users whose information was published, beyond the flat 5,000-yen payment announced earlier.