GMO Network Hit by Cyberattack, $1M Ransom Demanded

Japan’s internet giant GMO Internet recently suffered a severe cybersecurity incident. Its service platform was illegally accessed by unauthorized actors, who left multiple suspected unauthorized transactions in its digital trading system. The breach not only exposed security vulnerabilities at GMO but also placed tens of thousands of users at risk of financial loss and personal data exposure.

According to reports, the attackers exploited a software vulnerability to gain administrative privileges and implanted malicious code in user accounts, resulting in the alteration or fabrication of transaction data. Several users of GMO’s e-commerce platform discovered unfamiliar transaction records in their accounts with unclear amounts, which could not be verified through customer service. GMO has initiated emergency response procedures and is collaborating with police to investigate the incident.

More alarmingly, the attackers publicly disclosed the personal information of one user, citing their failure to secure a $1 million ransom, and demanded that GMO pay that amount to halt further data leaks. The hacking group also urged all users of GMO’s services on social media to immediately power off their devices, warning that personal data would continue to be exposed if they did not comply. This action constitutes a typical ransomware-style extortion attempt, using intimidation to coerce the company into paying a ransom.

For affected users, the potential monetary losses are compounded by the significant risk of personal privacy breaches. Experts advise users to immediately change the passwords for all related accounts and enable two-factor authentication.