Goodwill Payments to Customers and Compensation for Losses from Unauthorised Transactions Following Unauthorised Access at Consolidated Subsidiary GMO Internet, Inc.
GMO Internet, Inc., a consolidated subsidiary of GMO Internet Group, Inc.
The systems of the Onamae.com Desktop Cloud service and customers' PCs connected to the service
A security issue existed in the service's systems, unauthorised access was made to the service environment, and customer information was taken outside the environment
Company response
New applications and the control panel were suspended on 20 October 2026, and servers for all plans were suspended sequentially from 4:00 a.m. on 21 October 2026. Network connections to the affected systems were also suspended.
The current system infrastructure will not be restarted as is. The timing for launching the replacement service will be announced by 23:59 on 30 October 2026.
Fundamental renewal of the security architecture, blocking communications, blocking unauthorised transactions, forcibly disconnecting all active sessions, and emergency monitoring and deterrence measures for unauthorised transactions
Related procedures
Request for a criminal investigation, initial reports to the police and relevant government authorities, and cooperation with the investigation
Police authorities (cybercrime division), the police, relevant government authorities, and government-related agencies
Cannot be calculated at this time (impact on the company's consolidated results)
The company will announce by 23:59 on 30 October 2026 how affected customers will be notified of the goodwill payment, the procedures for receiving it, and the payment date, as well as the launch date and application procedures for the replacement service. By 6 November, it will announce the application procedures, required documents, application period, and payment date for compensation for losses from unauthorised transactions. The company will respond in cooperation with the police and government-related agencies and will provide updates on its website and elsewhere as information becomes available.
Additional information will be announced as details become available. GMO Internet, Inc. will provide updates on its website and elsewhere as information becomes available.
| Item | Details |
|---|---|
| Event name | Goodwill Payments to Customers and Compensation for Losses from Unauthorised Transactions Following Unauthorised Access at Consolidated Subsidiary GMO Internet, Inc. |
| Date of occurrence | 20 October 2026 (the date on which it was confirmed that unauthorised programs had been installed by a third party in some customers' server environments for the service) |
| Date recognized / date notice received | 19 October 2026 (the date on which an investigation was launched following customer enquiries) |
| Subject Entity | GMO Internet, Inc., a consolidated subsidiary of GMO Internet Group, Inc. |
| Target Locations / Products | The systems of the Onamae.com Desktop Cloud service and customers' PCs connected to the service |
| Cause | A security issue existed in the service's systems, unauthorised access was made to the service environment, and customer information was taken outside the environment |
| Amount of Impact on Business Performance | Cannot be calculated at this time (impact on the company's consolidated results) |
| Type of litigation or proceeding | Request for a criminal investigation, initial reports to the police and relevant government authorities, and cooperation with the investigation |
| Court or authority | Police authorities (cybercrime division), the police, relevant government authorities, and government-related agencies |
| Suspended operations | New applications and the control panel were suspended on 20 October 2026, and servers for all plans were suspended sequentially from 4:00 a.m. on 21 October 2026. Network connections to the affected systems were also suspended. |
| Scheduled resumption date | The current system infrastructure will not be restarted as is. The timing for launching the replacement service will be announced by 23:59 on 30 October 2026. |
| Measures to prevent recurrence | Fundamental renewal of the security architecture, blocking communications, blocking unauthorised transactions, forcibly disconnecting all active sessions, and emergency monitoring and deterrence measures for unauthorised transactions |
| Outlook | The company will announce by 23:59 on 30 October 2026 how affected customers will be notified of the goodwill payment, the procedures for receiving it, and the payment date, as well as the launch date and application procedures for the replacement service. By 6 November, it will announce the application procedures, required documents, application period, and payment date for compensation for losses from unauthorised transactions. The company will respond in cooperation with the police and government-related agencies and will provide updates on its website and elsewhere as information becomes available. |
| Planned follow-up disclosure | Additional information will be announced as details become available. GMO Internet, Inc. will provide updates on its website and elsewhere as information becomes available. |
Items this document does not state (11)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.To prioritise customer protection, ensure security, and address customer concerns arising from the unauthorised access and losses from unauthorised transactions.