GMO breach may expose 26,739 desktops and trading passwords
GMO Internet says its Onamae.com Desktop Cloud service was accessed without authorisation, exposing customer information and potentially affecting users’ foreign exchange trading accounts. The breach is especially concerning because the company promoted the cloud-hosted Windows desktops as a suitable environment for trading, and some customers have reported transactions they do not recognise.
GMO warned that as many as 26,739 virtual desktop servers may have been affected, and that attackers may have seen trading passwords. It asked trading services to end active sessions and block requests from its cloud service, while advising customers to change passwords from another device and check for lingering sessions. GMO says it received a ransom demand but will not pay; it is offering customers ¥5,000 and promises a free alternative environment for six months, infrastructure changes and an investigation. CEO Masatoshi Kumagai acknowledged that internal security improvements had been identified but were not implemented quickly or deeply enough.
In short
- GMO says up to 26,739 virtual desktop servers may have been affected.
- Some customers reported trading transactions they did not recognise.
- The company will not pay the ransom demand and is offering ¥5,000.
Steelman: both sides, in good faith
The strongest fair case each way — we don't pick a winner.
The case for
GMO’s refusal to pay the ransom can be defended as avoiding incentives for further attacks and avoiding any assumption that payment would restore data or prevent its misuse. Its offers of compensation, a free alternative environment and infrastructure changes are constructive steps, while asking trading services to end sessions and advising customers to change passwords can help limit immediate harm.
The case against
Customers can reasonably argue that the breach exposed them to serious financial and privacy risks, particularly because GMO promoted the desktops as suitable for trading and some users report transactions they do not recognise. The CEO’s acknowledgement that known security improvements were not implemented quickly or thoroughly enough strengthens concerns about the company’s safeguards and accountability; the announced compensation and service changes may not cover customers’ actual losses or restore confidence.
Explained simply
GMO Internet is a Japanese technology company that provides online services, including Onamae.com Desktop Cloud. The service gives customers access to Windows computers hosted online, which they can use remotely rather than relying on a computer in front of them.
GMO promoted these virtual desktops as suitable for foreign exchange trading, where users buy and sell currencies through online accounts. That link matters because someone with access to a desktop might be able to see information used to sign in to a trading account.
The case raises questions about how cloud services protect customer data and how quickly companies address security weaknesses. GMO’s chief executive, Masatoshi Kumagai, has said that some planned security improvements were not put in place quickly or thoroughly enough.
Asia Business Companies Cybersecurity Technology World
Read the full article at the source →
Originally published by The Register as “Japanese virtual desktop cloud hacked so hard it asks to be banned”.