Science & Tech · Cybersecurity · 1 hr ago
GMO Internet urges users to unplug computers before expected noon cyberattack
GMO Internet has urged users to unplug their computers ahead of an expected cyberattack.
The warning is for around noon on Oct.
27.
The available information does not identify who is behind the attack or what systems it may target.
It also gives no details about how users could be affected.
The company’s call to unplug is the main precaution described.
No further steps or updates are specified.
GMO Internet Group urged users of its trading-related virtual private server service to back up their computers and turn them off before noon on October 27.
The company said a person believed to be behind an attack threatened to publish customer information and launch ransomware at noon unless a payment was made.
GMO also asked users to unplug connected cables, scan their devices for viruses and protect their accounts.
The company is investigating possible damage, including by collecting customer computers for analysis.
GMO said it would not meet the attacker’s financial demands and was working with police.
- Who
- GMO Internet Group and users of its Onamae.com Desktop Cloud service.
- What
- GMO urged users to back up their computers, disconnect them from networks, turn them off and unplug connected cables. It said a person believed to be an attacker threatened to publish customer information and launch ransomware.
- When
- October 27, 2026, before noon; the threatened attack was set for noon.
- Where
- Japan; the service is used for automated foreign-exchange trading.
- Why
- To reduce the risk from a threatened attack and possible publication of customer information.
GMO Internet Group
Security expert Sho Nakaya
Device response
GMO Internet Group
GMO urged users to back up their data, disconnect from networks, turn off their computers and unplug cables.
Security expert Sho Nakaya
Nakaya said isolating devices from the internet while leaving them powered on would usually make later investigation easier, though he considered shutdowns reasonable for many personal devices.
GMO announced unauthorized access to a cloud service offered by a group company.
GMO disclosed that FX account login information and other data may have been obtained and misused.
GMO announced ¥5,000 payments to affected users and compensation for losses from unauthorized trades.
GMO began asking users to cooperate with investigations of their devices.
GMO president Masatoshi Kumagai disclosed an earlier $50 million demand with a deadline of 5 p.m. on October 21.
GMO urged users to turn off and unplug their computers before noon, when a person believed to be the attacker threatened to publish customer data and launch ransomware.
- Service
- Onamae.com Desktop Cloud
- Threat deadline
- Noon on October 27, 2026
- Latest demand
- $1 million
- Earlier demand
- $50 million, with a deadline of 5 p.m. on October 21
- User compensation
- ¥5,000 per affected user, plus compensation for losses from unauthorized trades
4 sources
What people are saying
To reliably prevent damage, they likely chose the simple instruction of turning off the power.