Unauthorized access to a service provided by a consolidated subsidiary
GMO Internet, Inc. (a consolidated subsidiary of the filing company)
Onamae.com Desktop Cloud (all plans)
Unauthorized access by a third party resulted in malicious programs being installed in the server environments of some customers. The route of intrusion is under investigation.
Company response
New applications and the control panel were suspended on 20 October 2026. Servers under all plans have been suspended sequentially since 4:00 a.m. on 21 October 2026, and the suspension remains in effect.
To be determined. The company plans to announce the date once safety has been confirmed and the date finalized.
The route of intrusion and scope of the impact are being investigated with a cybersecurity specialist. The third-party committee and special investigation committee are Not disclosed.
Related procedures
Consultation with the police; reporting to and consultation with the relevant authorities
Police and relevant authorities (names not disclosed)
The impact of this matter on consolidated results is currently under review. If it becomes necessary to revise the earnings forecast or facts requiring disclosure are identified, the company will notify the public promptly.
The suspension of servers under all plans will continue. In cooperation with the cybersecurity specialist, police, relevant service providers and relevant authorities, the company will investigate the route of intrusion and scope of the impact, confirm the damage, prevent its spread, and proceed with reporting and consultation. The service will resume once safety has been confirmed and the resumption date finalized, and the company will announce the timing promptly.
GMO Internet, Inc. will provide updates from time to time through its website and other channels as information becomes available. The company will also promptly announce any newly identified facts requiring disclosure.
| Item | Details |
|---|---|
| Event name | Unauthorized access to a service provided by a consolidated subsidiary |
| Date of occurrence | 20 October 2026 (the date the company confirmed the installation of malicious programs; the actual date of unauthorized access is Not disclosed) |
| Date recognized / date notice received | 19 October 2026 (investigation commenced in response to a customer inquiry), 20 October 2026 (installation of malicious programs confirmed) |
| Subject Entity | GMO Internet, Inc. (a consolidated subsidiary of the filing company) |
| Target Locations / Products | Onamae.com Desktop Cloud (all plans) |
| Cause | Unauthorized access by a third party resulted in malicious programs being installed in the server environments of some customers. The route of intrusion is under investigation. |
| Impact on Earnings Forecast | The impact of this matter on consolidated results is currently under review. If it becomes necessary to revise the earnings forecast or facts requiring disclosure are identified, the company will notify the public promptly. |
| Type of litigation or proceeding | Consultation with the police; reporting to and consultation with the relevant authorities |
| Court or authority | Police and relevant authorities (names not disclosed) |
| Suspended operations | New applications and the control panel were suspended on 20 October 2026. Servers under all plans have been suspended sequentially since 4:00 a.m. on 21 October 2026, and the suspension remains in effect. |
| Scheduled resumption date | To be determined. The company plans to announce the date once safety has been confirmed and the date finalized. |
| Investigation structure | The route of intrusion and scope of the impact are being investigated with a cybersecurity specialist. The third-party committee and special investigation committee are Not disclosed. |
| Outlook | The suspension of servers under all plans will continue. In cooperation with the cybersecurity specialist, police, relevant service providers and relevant authorities, the company will investigate the route of intrusion and scope of the impact, confirm the damage, prevent its spread, and proceed with reporting and consultation. The service will resume once safety has been confirmed and the resumption date finalized, and the company will announce the timing promptly. |
| Planned follow-up disclosure | GMO Internet, Inc. will provide updates from time to time through its website and other channels as information becomes available. The company will also promptly announce any newly identified facts requiring disclosure. |
Items this document does not state (11)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.Because unauthorized access by a third party may have resulted in malicious programs being installed in the server environments of some customers, with trading-account login information and other data potentially obtained and misused. The route of intrusion and whether individual data was obtained, as well as the scope of any such acquisition, are under investigation.