GMO Internet is investigating a data leak following suspected unauthorized access to Onamae, a cloud service that supplies virtual desktops to financial traders. GMO said a suspected attacker had published data allegedly connected to GMO and GMO customers. GMO is still verifying the published material, and the incident's full scope remains unknown. GMO said the breach may affect 27,000 servers.
GMO advised customers to change passwords after receiving reports of unauthorized activity in customer trading accounts. A GMO spokesperson did not answer a request for comment.
GMO shut down Onamae Desktop Cloud on October 21 after discovering unauthorized access to GMO systems. GMO also received an email in which hackers demanded about 8 billion yen (about $50 million). GMO notified police in Japan on October 22 and issued a further public update.
GMO said on October 24 that GMO would provide compensation and an alternative service to customers while requesting assistance from government agencies. GMO began gathering customer devices on October 25 and 26 to check for malware and assess the damage. GMO said on October 27 that a suspected attacker had posted information apparently connected to GMO and GMO customers. GMO said checks on the information's authenticity were continuing.
About a week before the incident, GMO's cybersecurity unit separately reported evidence that hackers had used Artex against companies across Japan. Artex is an AI-enabled penetration testing tool developed in China. However, GMO said GMO had not publicly established any link between Artex and the Onamae breach.
CrowdStrike reported earlier this month that attackers also used Artex against financial institutions in South Korea in September. Those attacks mainly exploited inadequate security controls, including missing multi-factor authentication. Reuters reported that Artex's developer in China stopped public updates and converted the tool to closed-source after links emerged to cyberattacks against banks.
A spokesperson for Japan's Financial Services Agency said the regulator issued guidance in May urging financial institutions to prepare for increasing cybersecurity vulnerabilities. The spokesperson said the regulator urged stronger fundamental protections, including vulnerability management, defense-in-depth and readiness for incidents. The spokesperson said the regulator also encouraged financial institutions to adopt AI and other security tools.
Japan's GMO Investigates Data Leak Affecting 27,000 Servers
FLASH AIShare
Summary
Japan's GMO Internet is investigating a security breach at its cloud service Onamae, potentially affecting 27,000 servers. Unauthorized access was found on October 21, leading to the shutdown of Onamae Desktop Cloud. Hackers reportedly leaked data and demanded 8 billion yen in ransom. The company is verifying the data and compensating affected users. The Financial Services Agency had earlier warned about security risks amid rising inflation data.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.