Unauthorized access to and personal information leakage from the consolidated subsidiary-operated website "infoQ"
GMOリサーチ＆AI株式会社 (the company's consolidated subsidiary)
The survey website "infoQ" and its servers
The company has confirmed that a third party gained access by exploiting a vulnerability in software used on the website.
Company response
The "infoQ" service. External access to the website has been blocked since 15:00 on 3 October 2026.
To resume after confirming security (specific timing: Not disclosed)
The investigation is continuing with the assistance of a cybersecurity specialist.
The company will implement measures to prevent recurrence based on the investigation results.
Related procedures
Report to the Personal Information Protection Commission
Personal Information Protection Commission
The impact of this matter on business performance is currently under review. If the company determines that a revision to its earnings forecast is necessary, it will make a timely announcement.
The company will implement measures to prevent recurrence based on the investigation results and resume the website's services after confirming security. Individual emails will be sent to the affected members on a rolling basis from 5 October 2026.
If the company determines that a revision to its earnings forecast is necessary, or if any other matter requiring disclosure arises, it will make a timely announcement.
| Item | Details |
|---|---|
| Event name | Unauthorized access to and personal information leakage from the consolidated subsidiary-operated website "infoQ" |
| Date of occurrence | Since 2 October 2026 (unauthorized access); confirmed on 3 October 2026 |
| Date recognized / date notice received | 3 October 2026 (confirmed through an investigation conducted in response to an inquiry from a member) |
| Subject Entity | GMOリサーチ＆AI株式会社 (the company's consolidated subsidiary) |
| Target Locations / Products | The survey website "infoQ" and its servers |
| Cause | The company has confirmed that a third party gained access by exploiting a vulnerability in software used on the website. |
| Impact on Earnings Forecast | The impact of this matter on business performance is currently under review. If the company determines that a revision to its earnings forecast is necessary, it will make a timely announcement. |
| Type of litigation or proceeding | Report to the Personal Information Protection Commission |
| Court or authority | Personal Information Protection Commission |
| Date of filing / date of action | 5 October 2026 (date reported to the Personal Information Protection Commission) |
| Suspended operations | The "infoQ" service. External access to the website has been blocked since 15:00 on 3 October 2026. |
| Scheduled resumption date | To resume after confirming security (specific timing: Not disclosed) |
| Investigation structure | The investigation is continuing with the assistance of a cybersecurity specialist. |
| Measures to prevent recurrence | The company will implement measures to prevent recurrence based on the investigation results. |
| Outlook | The company will implement measures to prevent recurrence based on the investigation results and resume the website's services after confirming security. Individual emails will be sent to the affected members on a rolling basis from 5 October 2026. |
| Planned follow-up disclosure | If the company determines that a revision to its earnings forecast is necessary, or if any other matter requiring disclosure arises, it will make a timely announcement. |
Items this document does not state (9)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.The company has confirmed that a third party gained access by exploiting a vulnerability in software used on the website.