# GMO breach may expose 26,739 desktops and trading passwords

- URL: https://talkfuse.com/story/japanese-virtual-desktop-cloud-hacked-so-hard-it-asks-to-be-banned/
- Published: 2026-10-27T01:06:22+00:00
- Updated: 2026-10-27T02:33:06+00:00
- Original publisher: The Register
- Original article: https://www.theregister.com/security/2026/10/27/japanese-virtual-desktop-cloud-hacked-so-hard-it-asks-to-be-banned/5305610
- Topics: Asia, Business, Companies, Cybersecurity, Technology, World

## Key points

- GMO says up to 26,739 virtual desktop servers may have been affected.
- Some customers reported trading transactions they did not recognise.
- The company will not pay the ransom demand and is offering ¥5,000.

## Summary

GMO Internet says its Onamae.com Desktop Cloud service was accessed without authorisation, exposing customer information and potentially affecting users’ foreign exchange trading accounts. The breach is especially concerning because the company promoted the cloud-hosted Windows desktops as a suitable environment for trading, and some customers have reported transactions they do not recognise.

GMO warned that as many as 26,739 virtual desktop servers may have been affected, and that attackers may have seen trading passwords. It asked trading services to end active sessions and block requests from its cloud service, while advising customers to change passwords from another device and check for lingering sessions. GMO says it received a ransom demand but will not pay; it is offering customers ¥5,000 and promises a free alternative environment for six months, infrastructure changes and an investigation. CEO Masatoshi Kumagai acknowledged that internal security improvements had been identified but were not implemented quickly or deeply enough.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.