Komori
Occurring Fact9449GMO internet group,Inc.Information and Communications, Services and Others

Notice regarding the response policy for unauthorized access at consolidated subsidiary GMO Internet, Inc.

Following unauthorized access to the “Onamae.com Desktop Cloud” service of consolidated subsidiary GMO Internet, Inc., the company decided to provide special goodwill payments and support to customers whose information was subject to disclosure, reject demands from the attackers, and establish a bounty for information. The total cost of the response cannot yet be calculated because the scope and other details have not been finalized.

Worth reading
35Immaterial
0–100. This measures how worthwhile something is to read, not how good or bad the company is.
Direction
Deterioration
Direction inferred from the company’s description.
Scale
1000000
US dollars (bounty cap; reference conversion: approximately ¥150 million)
Wording
Avoiding a definitive answer
How definitive the wording is.

Response policy for unauthorized access at consolidated subsidiary GMO Internet, Inc.

Subject Entity

GMO Internet, Inc. (a consolidated subsidiary of the filing company) and GMO Internet Group, Inc.

Target Locations / Products

Onamae.com Desktop Cloud service

This disclosure10/28/2026
Cause

Unauthorized access by a third party. The detailed cause is not disclosed.

Company response

Investigation structure

The group’s white-hat hacking team is continuing to investigate and analyze devices entrusted by customers.

Measures to prevent recurrence

Policy never to comply with the attackers’ demands

Amount of Impact on Business Performance

The total cost of the response cannot be calculated at present. The GMO Cybercrime Eradication Bounty is capped at US$1 million (reference conversion: approximately ¥150 million). Costs will be borne by us.

Related procedures

Court or authority

Consultation with relevant authorities, including the police

Outlook

GMO Internet will provide updates from time to time via its website and other channels as information becomes known. We will also promptly disclose any new facts that should be disclosed. The investigation and analysis of the devices will continue.

Planned follow-up disclosure

Provide updates from time to time or promptly as information becomes known

Event that occurred
ItemDetails
Event nameResponse policy for unauthorized access at consolidated subsidiary GMO Internet, Inc.
Subject EntityGMO Internet, Inc. (a consolidated subsidiary of the filing company) and GMO Internet Group, Inc.
Target Locations / ProductsOnamae.com Desktop Cloud service
CauseUnauthorized access by a third party. The detailed cause is not disclosed.
Amount of Impact on Business PerformanceThe total cost of the response cannot be calculated at present. The GMO Cybercrime Eradication Bounty is capped at US$1 million (reference conversion: approximately ¥150 million). Costs will be borne by us.
Court or authorityConsultation with relevant authorities, including the police
Investigation structureThe group’s white-hat hacking team is continuing to investigate and analyze devices entrusted by customers.
Measures to prevent recurrencePolicy never to comply with the attackers’ demands
OutlookGMO Internet will provide updates from time to time via its website and other channels as information becomes known. We will also promptly disclose any new facts that should be disclosed. The investigation and analysis of the devices will continue.
Planned follow-up disclosureProvide updates from time to time or promptly as information becomes known
Items this document does not state (15)
Date of occurrenceDate recognized / date notice receivedAccounting period in which recognizedImpact on Earnings ForecastType of litigation or proceedingPlaintiffDefendantDate of filing / date of actionClaim amount / surcharge amountAmount of receivables at risk of non-collection or delayed collectionSuspended operationsScheduled resumption dateDirectors' and officers' liabilityVoting rights ownership percentage before the changeVoting rights ownership percentage after the change

These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.

The reasons the company gives

The company's own explanation, not something inferred from the numbers.

The company determined that complying with the attackers’ demands would not guarantee the deletion or prevention of unauthorized use of the information, and took into account its social responsibility not to facilitate criminal activity. The total cost cannot yet be calculated because the number of affected customers, the scope of the information disclosed, and the transactions subject to compensation have not been finalized.

How to read this page

This is not the documentKomori reads the disclosure the company filed and writes this summary. Figures are as stated by the company and are not audited.
Weight is not a verdictIt measures how much this changes what the company had already told the market. It is not a view on the shares.
Corrections happenIf the company reissues this disclosure, the page is rebuilt from the corrected version and the revision number moves up.