Overview
- GMO said malicious programs were placed on up to 26,739 Onamae.com Desktop Cloud servers and that customer information was exfiltrated.
- The company has acknowledged reports of rapid, unauthorized FX trades that wiped out users' balances and promised to compensate verified losses.
- On October 24, GMO announced a uniform condolence payment of ¥5,000 to all users, suspended the affected service, and offered a six‑month free alternative.
- GMO reported it received monetary demands from the attackers, refused to pay because that would not guarantee data deletion, and has handed communication records to police.
- The firm has formally asked authorities to approve active cyber defense to neutralize the attackers, a request that could be the first use of Japan's new law and may shape future private‑sector responses to cross‑border cybercrime.