Osegi
Security·1 min read

GMO Chairman Apologizes Over Onamae.com Desktop Cloud Breach

GMO Internet Group's chairman Masatoshi Kumagai apologized at a press conference over the Onamae.com Desktop Cloud breach, which exposed FX trading credentials and triggered an extortion demand.

Executive bowing in apology at a press conference in Japan following a cloud server security breach.
Image: Impress Watch

GMO Internet Group apologized on November 2 for the unauthorized access to its "Onamae.com Desktop Cloud" service, in which customer assets were stolen and the attacker is threatening to publish customer information.

The affected product is the "FX Automated Trading VPS," a service built for automated foreign exchange trading. In October, attackers planted malicious programs in users' server environments. Login credentials for FX and other trading accounts stored on those servers were obtained by a third party and misused. Up to 26,739 servers may have been affected.

Ransom demand rejected

The attacker also demanded a ransom of 8 billion yen from GMO Internet Group and GMO Internet. According to the company, it has refused. The intrusion took place on October 21. GMO says it has been working on measures to prevent further damage, but threats concerning user information and environments continue, and the service remains suspended.

At the press conference, Chairman and Representative Director Masatoshi Kumagai apologized for the loss of users' assets. He also acknowledged that experts at the group's subsidiary GMO Cybersecurity by Ierae had pointed out problems in the system beforehand. "We were unable to use that in running the service," he said, adding that the company takes this fact seriously.

Apology for social media posts

Kumagai also apologized for his social media activity after the incident: mentioning victims in his own post, posting a photo of himself smiling under these circumstances, and leaving an inappropriate comment toward a user who posted about the company's track and field team. He said all three lacked consideration for those affected. He had already apologized on X on October 29 and repeated it.

The company also announced pay cuts for four executives in total. Kumagai will take a 30% cut to his monthly compensation for three months.

Apps worth a look

SUMO: the number puzzle

Tap the right tiles, add them up, hit the target. Easy to learn, hard to master. Free, for all ages.

Tags:gmoonamae.comdata breachransomfx tradingvps

More from this day

See all →

More in: Security

See all →