[Important] Cyber Attack on the Onamae.com Desktop Cloud Service (4th Report) | GMO Internet Group, Inc.

What happened

GMO Internet, a Japanese internet company, found that its Desktop Cloud service had a security problem. Hackers got into the service's environment without permission and took customer information out. Some customers also reported trades in their trading accounts that they did not make. The company has stopped the old system and will not restart it as it was. It will offer a new, separate service instead.

Key numbers and facts

• Every current customer gets 5,000 yen as apology money, whether or not they lost money.
• Customers who switch to the new service can use it free for 6 months.
• Unauthorized trades may be covered for the losses they caused, but market losses and lost profits are not covered.
• The attackers asked for money and threatened to publish data. The trades reached more than 70 securities and FX companies in Japan and abroad.
• Details on payments and applications are promised by October 30, 2026 (email), and the application process by November 6.

Background for new readers

A desktop cloud service lets people use a Windows computer that runs on a company's servers, over the internet. Hackers can use access like this to log in to customers' computers and trading accounts. The company says it has asked the police and government agencies for help. It has also asked for a government response called active cyber defense, a set of steps to stop serious online attacks before they cause more harm.

Why it matters

This case shows how one weak point in an internet service can put customers' money and personal information at risk. The company says it will not pay the attackers, because paying does not guarantee that stolen data will be deleted. Customers should be careful with messages that ask for passwords or PINs. The company says it will never ask for them.

What to watch

• Email notices about how to receive the 5,000 yen payment, due by October 30, 2026.
• Details of the new service, its free period, and the fee after 6 months.
• The claim process, required documents, and payment dates, due by November 6.
• Whether attackers publish stolen data. The company warns that some posted claims may be false.
• How the government responds to the request for active cyber defense measures.