GMO Internet Group discloses prolonged unauthorized access at Onamae.com Desktop Cloud
Published · Updated
What happened
GMO Internet Group announced on November 2 that unauthorized access to its Onamae.com Desktop Cloud service led to a data breach. The company said the breach had remained undetected for about two and a half months and that it had not yet identified the intrusion route or root cause.
Why it matters
A breach that persisted for weeks without detection at a major Japanese internet services provider points to gaps in monitoring, incident disclosure, and customer protection. The case may prompt follow-on action by regulators, affected corporate users, and other providers that run similar cloud or remote desktop environments.
GMO Internet Group said on November 2 that its Onamae.com Desktop Cloud service suffered unauthorized access and a data breach, and that the intrusion had continued for about two and a half months before detection. At a press conference the company said the entry point and cause had not yet been identified. The disclosure turns a private-sector cyber incident into a wider resilience issue because it raises questions about detection, third-party warnings, and the handling of customer data in a widely used cloud-linked service.
Watch for
GMO Internet Group release of a customer-impact tally and breach scope update by 2026-11-05 Personal Information Protection Commission acknowledgement of an inquiry, guidance, or administrative step related to GMO by 2026-11-05 JPCERT/CC publication of indicators of compromise or technical mitigation advice tied to the GMO incident by 2026-11-05 No GMO disclosure of the intrusion route or initial access vector by 2026-11-05
Sources
- GMO記者会見を読む：「ネットのセキュリティもGMO」の実態 イエラエの事前指摘はなぜ放置されたか · itmedia.co.jp
Researched and written by AI from the sources listed, under published rules. How V³ Aware is made