GMO Internet Group held a press conference on 2 November to explain the unauthorised access incidents involving GMO Trust Login and GMO GlobalSign. The incident involving GMO Payment Gateway, however, was not mentioned at the press conference.
GMO Internet Group held a press conference on 2 November 2026 to discuss information security incidents at group companies, explaining the incidents involving GMO Trust Login and GMO GlobalSign. The incident involving GMO Payment Gateway was reportedly not mentioned at the press conference.
In the GMO Trust Login incident, it was disclosed that a configuration error had left customer information viewable externally for approximately 9 years. The company explained that the information potentially affected covered 2,492 companies and 45,030 people. The company explained the circumstances in response to questions from reporters and said that measures to prevent a recurrence would be advanced by 30 November.
A representative of GMO GlobalSign also explained the circumstances of its incident. It was also disclosed that some customer information may have been leaked through unauthorised activity involving a payment support service provided by GMO Payment Gateway to Life Card, but this incident, which was disclosed on the same day, was not mentioned at the press conference.
In interviews after the press conference, GMO Internet Group suggested that it might provide further explanations of the incidents at the two companies. The company said it would report monthly on measures to prevent a recurrence at Trust Login until all measures were completed, while information on the Payment Gateway incident would be disclosed promptly if new details came to light.