GMO Internet's desktop cloud service suffered unauthorized access, and reports indicated that more than 26,000 servers may have been affected. The incident has renewed attention on the features and risks of the proprietary product portfolio of Soliton Systems, which has worked in authentication and remote access for many years.
In October 2026, the Windows server service "Onamae.com Desktop Cloud" provided by GMO Internet suffered unauthorized access, and the number of servers that may have been affected exceeded 26,000. According to media reports, login credentials for trading tools stored on the servers were misused, and unauthorized activity was reportedly confirmed in users' trading accounts.
GMO subsequently acknowledged that its own systems had a security issue and announced compensation for losses. It took steps to prevent the damage from spreading, including urging users to conduct full scans of their devices. These events point to the importance of strengthening both "remote entry routes" and "authentication of users and devices."
Listed on the TSE Prime Market, Soliton Systems has developed and provided proprietary authentication devices and multifactor authentication products for more than 40 years, with a track record of deployments at government agencies and companies. Its products serving as the entry point for security include NetAttest EPS, Soliton OneGate, SmartOn ID and FileZen S.
At the same time, the risk that the company's proprietary products could become an entry point for attacks has also been highlighted, and there have been cases in which vulnerabilities in an older file-transfer product were disclosed. In addition, some have pointed out that investment decisions will hinge on distinguishing the company's underlying structural strength from temporary factors as replacement demand runs its course.