Unauthorized access to a service provided by the company
GMO Internet, Inc. (the filing company)
Onamae.com Desktop Cloud (all plans)
Unauthorized access by a third party. The route of intrusion is under investigation.
Company response
New applications and the control panel were suspended on 20 October 2026. Servers under all plans have been suspended sequentially since 4:00 a.m. on 21 October 2026, and the suspension remains in effect.
To be determined. The date will be announced once safety has been confirmed and the date finalized.
The route of intrusion and scope of the impact are being investigated with a cybersecurity specialist. The name of the chair and the establishment date of the third-party committee and special investigation committee are Not disclosed.
Related procedures
Consultation with the police; reporting to and consultation with the relevant authorities
Police and relevant authorities (specific names not disclosed)
The impact of this matter on consolidated results is currently under review. If it becomes necessary to revise the earnings forecast or facts requiring disclosure are identified, the company will notify the public promptly.
The suspension of servers under all plans will continue. In cooperation with the cybersecurity specialist, police, relevant service providers and relevant authorities, the company will investigate, confirm the damage and prevent its spread. The service will resume once safety has been confirmed and the resumption date finalized, with updates provided through the website and other channels as information becomes available.
Updates will be provided from time to time through the company’s website and other channels as information becomes available.
| Item | Details |
|---|---|
| Event name | Unauthorized access to a service provided by the company |
| Date of occurrence | 20 October 2026 (the date the installation of a malicious program was confirmed; the actual date of unauthorized access is Not disclosed) |
| Date recognized / date notice received | 19 October 2026 (investigation commenced in response to a customer inquiry), 20 October 2026 (installation of a malicious program confirmed) |
| Subject Entity | GMO Internet, Inc. (the filing company) |
| Target Locations / Products | Onamae.com Desktop Cloud (all plans) |
| Cause | Unauthorized access by a third party. The route of intrusion is under investigation. |
| Impact on Earnings Forecast | The impact of this matter on consolidated results is currently under review. If it becomes necessary to revise the earnings forecast or facts requiring disclosure are identified, the company will notify the public promptly. |
| Type of litigation or proceeding | Consultation with the police; reporting to and consultation with the relevant authorities |
| Court or authority | Police and relevant authorities (specific names not disclosed) |
| Suspended operations | New applications and the control panel were suspended on 20 October 2026. Servers under all plans have been suspended sequentially since 4:00 a.m. on 21 October 2026, and the suspension remains in effect. |
| Scheduled resumption date | To be determined. The date will be announced once safety has been confirmed and the date finalized. |
| Investigation structure | The route of intrusion and scope of the impact are being investigated with a cybersecurity specialist. The name of the chair and the establishment date of the third-party committee and special investigation committee are Not disclosed. |
| Outlook | The suspension of servers under all plans will continue. In cooperation with the cybersecurity specialist, police, relevant service providers and relevant authorities, the company will investigate, confirm the damage and prevent its spread. The service will resume once safety has been confirmed and the resumption date finalized, with updates provided through the website and other channels as information becomes available. |
| Planned follow-up disclosure | Updates will be provided from time to time through the company’s website and other channels as information becomes available. |
Items this document does not state (11)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.Unauthorized access by a third party was confirmed, and servers under all plans have been suspended to prevent the damage from spreading.