The virtual private server service "お名前ドットコム デスクトップクラウド" operated by GMOインターネット is reportedly the subject of unauthorized access, and the company is considering compensation for users and providing a free alternative service. The attacker reportedly demanded money, prompting an urgent request to the government to apply active cyber defense.
GMOインターネット announced that its cloud service "お名前ドットコム デスクトップクラウド," which it leased for automated FX trading, had been subject to unauthorized access. The affected users were users of the company's VPS service, and the incident is explained as potentially affecting their trading accounts.
The company said it plans to compensate users for losses and fees from transactions conducted without their consent as a result of the unauthorized access. It will pay all users a uniform ¥5,000 goodwill payment and provide an alternative service free of charge for 6 months to users who request it.
The number of users exceeds 20,000. Authentication information stored on the servers was reportedly viewed by a third party, creating the possibility of unauthorized activity in numerous securities and FX accounts in Japan and overseas. A party believed to be the attacker reportedly demanded money and threatened to continue unauthorized activity in the accounts and publish the information if the demand was not met.
It was also disclosed that the government had been urgently asked to apply active cyber defense, and the company plans to cooperate with the police investigation. The company explained that this defense is a mechanism under which the government makes a decision based on the seriousness and urgency of the incident, and cannot be initiated solely at the request of an individual company.