Overview
- GMO disclosed on Oct. 21 that an FX automated‑trading cloud service suffered unauthorized access that may have affected 26,739 servers and led users to report unfamiliar trades.
- GMO GlobalSign, a group unit, said on Nov. 1 that a configuration error left files containing about 45,030 people’s records across 2,492 companies externally accessible for roughly nine years.
- GMO’s internal analysis has identified multiple attack traces that it says make North Korea‑linked hacker involvement likely, and the company has shared those findings with government investigators.
- CEO Masatoshi Kumagai has urged the government to allow 'active cyber defense' actions by police or the Self‑Defense Forces to block attackers, and he will speak publicly about that request and evidence at the Nov. 2 briefing.
- Japan’s national authorities are finalizing an emergency cyber‑response package in reaction to this and other large breaches, a move that could tighten cross‑agency coordination and legal options for countermeasures.