GMO Internet allegedly subjected to extortion and possible customer information leak; related services suspended
BIBIBI
AT A GLANCE
Telegram messages stated that GMO Internet had been hit by ransomware, with some services suspended and customer information allegedly leaked.
Article
【Japanese IT giant GMO Internet hit by hackers demanding 50000000 USD ransom without success; customer information suspected of being leaked】
Japanese IT giant GMO Internet was hit by a cyberattack, after which hackers claimed to have disclosed customer information because they did not receive 50000000 USD the ransom. Its foreign exchange trading service has reportedly been suspended and is no longer accepting new subscriptions. In addition, all servers under its domain and cloud services Onamae were compromised, potentially affecting users. Reportedly,GMO Internet operates the virtual currency exchange “Z.com EX”, which has obtained licenses from Thailand’s Securities and Exchange Commission and the Thai Ministry of Finance. Last week, the exchange disclosed that it had been acquired; the acquisition involved GMO Internet and related subsidiaries, among other shareholders, transferring all shares in the target company.
Key points
01
A Telegram message stated that GMO Internet suffered a cyberattack.
02
The hackers claimed that because they did not receive 50000000 USD the ransom, they disclosed customer information.
03
It is reported that GMO Internet's foreign exchange trading service has been suspended and is no longer accepting new subscriptions.
04
It is reported that all servers of its domain and cloud services provider Onamae were compromised, potentially affecting users.
05
GMO Internet-operated virtual currency exchange Z.com EX; the exchange has obtained licenses from the Securities and Exchange Commission of Thailand and the Ministry of Finance of Thailand.
06
Last week, Z.com EX disclosed that it had been acquired; the acquisition involved GMO all shares of the target company held by shareholders including Internet and its related subsidiaries.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
This is a cyberattack report from a Telegram channel. The message mentions a ransom, service suspension, and possible data leakage, but currently provides no company announcement, regulatory disclosure, or independent technical forensics.
Why it matters to readers
If the relevant claims are true, service continuity, user information security, and the company's reputation could be affected; however, neither the incident nor the scope of the leak has been independently confirmed to date.
Users should treat statements such as “claimed,” “reportedly,” and “possible” as unconfirmed information and await official announcements and service status updates.
Risks and unknowns
Whether a cyberattack actually occurred has not been confirmed.
50000000 USD It has not yet been confirmed whether the ransom demand and customer information have been made public.
The scope of the Onamae server intrusion and the affected users are unclear.
Z.com EX The evidence does not indicate whether systems, user assets, and operations were affected by this incident.
The information comes from a Telegram channel; no company announcement, regulatory disclosure, or independent technical forensic evidence was provided.
Related Developments
Loading event timeline…
Related concepts
Ransom
This term is not in the glossary yet. Browse related concepts in the glossary.