GMO announces it will pay 5,000 yen to all affected customers as initial compensation after cyberattack
GMO Internet Group CEO Masatoshi Kumagai said the company will pay 5,000 yen (about $32) to all customers affected by the cyberattack-related foreign exchange trading services as an initial goodwill gesture. It will also compensate confirmed losses caused by unauthorized access.
The attack involved GMO’s Onamae.com Desktop Cloud service. The company confirmed a security vulnerability in the service system, that the environment was accessed without authorization, and that customer information was taken out. Some customers reported transactions in their trading accounts that they did not recognize. The attackers made a financial demand and threatened to disclose information, and GMO said it refused to pay and will coordinate its response with the police and other authorities.
The company also plans to offer customers six months of free alternative services and has asked the Japanese government to take proactive cyber defense measures. The stock price fell nearly 14% after the news was announced.
Original sources:
Title: Japanese companies compensate users as cyberattacks buffet economy Publisher: Reuters Publication date: 2026-10-26 URL: https://www.reuters.com/business/finance/japan-companies-compensate-users-cyberattacks-buffet-economy-2026-10-26/ Source type: media report Verification: actually read in this request, verification date 2026-10-26 Supporting content: supports the uniform 5,000-yen payment, compensation for losses, and the attack-related description
Title: [Important] Notice and Apology Regarding Unauthorized Access to “Onamae.com Desktop Cloud” (Four Report) Publisher: GMO Internet, Inc. Publication date: 2026-10-24 URL: https://internet.gmo/en/news/article/249 Source type: official company announcement Verification: actually read in this request, verification date 2026-10-26 Supporting content: supports the uniform 5,000-yen consolation payment (regardless of whether damage occurred) and compensation for confirmed losses from unauthorized transactions
Title: Security concerns flagged within Japan firm GMO before breach: CEO Publisher: Kyodo News Publication date: 2026-10-26 URL: https://english.kyodonews.net/articles/-/89418 Source type: media report Verification: actually read in this request, verification date 2026-10-26 Supporting content: supports the CEO’s statement that internal security issues had been raised and the payment plan
ABAB AI Insight
After unauthorized access to its Onamae.com Desktop Cloud service, GMO Internet Group announced that it will pay a uniform 5,000-yen (about $32) consolation payment to all customers currently using the service, regardless of whether they suffered actual financial losses. The service is mainly used for server rental related to foreign exchange and automated trading.
The company confirmed that the system had a security vulnerability, that customer information was taken out, and that some customers reported unauthorized transactions in their trading accounts. The attackers made a monetary demand and threatened to continue manipulating customer accounts at more than 70 securities firms or foreign exchange companies and to disclose the data. GMO said it refused to pay and coordinated with the police.
In addition to the uniform payment, the company will also compensate realized losses confirmed by its investigation as resulting from unauthorized transactions, including trading losses and fees. The current platform will not be restarted, and an alternative service will be provided. CEO Masatoshi Kumagai said that someone inside the company had pointed out security issues, but the response was insufficient.
ABAB News · Recognition Law
GMO announced a uniform 5,000-yen payment to all current customers of Onamae.com Desktop Cloud, regardless of whether actual losses occurred.
The company will separately compensate realized losses confirmed to have resulted from unauthorized transactions and refused the attackers’ monetary demand.
The attack led to customer information being taken out, and some customers reported unrecognized transactions in their trading accounts, involving potentially more than 70 institutions.