GMO Internet seeks state cyber defense action after cloud attack

GMO Internet said on October 24, 2026 that it has filed an emergency request with government agencies to promote state-led tracing, blocking and neutralization of attack infrastructure, according to japan.cnet.com. The request follows a cyberattack on the company's Onamae.com Desktop Cloud service.

GMO said the same day that it had confirmed a security flaw in its system and that user information was taken outside the company. The attacker demanded money and threatened to continue unauthorized operations on user trading accounts, publish information and carry out ransomware attacks if not paid. GMO said it would not comply with the demand.

Provisions on access and neutralization measures for servers used in attacks under the Cyber Response Capability Enhancement Act and related legislation took effect on October 1, 2026. Provisions on acquiring and analyzing communications information are scheduled to take effect by November 2027. Neutralization measures are carried out by police or the Self-Defense Forces and in principle require prior review and approval by an independent Cyber Communications Information Oversight Committee.

Compensation and service changes

GMO said it will pay all current users a uniform 5,000 yen consolation payment and compensate actual losses from unauthorized trades it acknowledges were caused by the breach. Instead of resuming the current system, the company will provide an alternative service free for six months.

The Cyber Response Capability Enhancement Act and its development law were enacted in May 2025.