GMO says attackers posted data from Onamae desktop breach
Original title: Japan internet giant GMO says hackers posted stolen customer data
The firm shut the trading desktop service on October 21 after a roughly $50 million ransom demand and now advises password resets.
GMO Internet is investigating unauthorized access to its Onamae cloud desktop service, used by financial traders, and says a suspected attacker has posted information that appears linked to customers and the business. The company has not finished verifying the contents. It says 27,000 servers may be affected and has told customers to reset passwords after reports of unauthorized operations on trading accounts. Service was shut on October 21 after an email demanding about 8 billion yen; police were notified the next day. GMO has not linked the breach to the Artex penetration-testing tool.
Unconfirmed: GMO is still checking whether the posted data is genuine and has not stated the full scope.
- Hackers demanded about 8 billion yen, roughly $50 million.
- GMO reported the incident to Japanese police on October 22.
- From October 25 it began collecting customer devices to look for malware.
- GMO says it has not tied the breach to Artex.
- The FSA had urged stronger basic defenses in May.
Impact: Alleged customer and business data published; trading accounts abused
| Product | Affected |
|---|---|
| GMO Internet Onamae Desktop Cloud | — |
- 1.Reset Onamae and related trading-account passwords as GMO advised.
- Vendors
- GMO Internet
- Products
- Onamae Desktop CloudArtex
- Victims
- GMO Internet
- Organizations
- Financial Services AgencyCrowdStrike
- Countries
- Japan
From the original article
2 min read at techcrunch.com
Japan's GMO Internet is verifying alleged customer data posted by suspected hackers following a cloud service breach.
By Kate Park · techcrunch.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.