Overview
- GMO Internet Group said late Monday that its FX service was breached and that attackers threatened a ransomware strike and public data release, with parts of customer information posted online on Tuesday.
- Security sources reported the attackers demanded about $1 million and published one customer’s personal details after the company declined to pay the ransom.
- Finance Minister Katsuyama Satsuki said five FX firms linked to the incident reported customer harm and the Financial Services Agency told all FX operators to force password resets and strengthen transaction monitoring.
- GMO is collecting affected customer devices for forensic analysis, offering an initial ¥5,000 compensation and considering additional payments for those whose data was published.
- Police and security firms warn of rising ransomware in Japan, urge victims to stop using compromised devices online, and caution that reposting leaked data risks further harm such as fraud or targeted scams.