GMO Onamae hacked: 26,739 servers shut

GMO Internet said on the 21st of October 2026 that an attacker had put harmful programs on its Onamae.com Desktop Cloud. Up to 26,739 servers may be affected, the Japanese company said.

Every current user will get 5,000 yen, and the old service will not return, GMO's parent group said on the 24th of October.

What GMO Internet's Onamae.com Desktop Cloud is

The service rents out remote Windows computers, called servers, that sit in a data centre and are used over the internet. Some customers kept logins to their trading accounts on them, GMO said on the 23rd of October.

GMO shut every plan from 04:00 Japan time on the 21st of October

GMO found the harmful programs on the 20th and began shutting every server at 04:00 Japan time on the 21st, it said. The 26,739 figure counts servers at risk and leaves out how many were broken into, GMO said on the 23rd.

GMO confirmed data was taken and trades were made

GMO confirmed on the 24th of October that customer information was taken out. Some customers reported trades they did not make, GMO said.

The attacker demanded money, and GMO said it will not pay and has gone to the police.

GMO pays 5,000 yen to each user and closes the old service

GMO will pay 5,000 yen to every current user and cover proven losses from unwanted trades, it said on the 24th. Users can move to a new cloud service, free for 6 months.

Below we break down the 5,000 yen payment

At about 150 yen to the dollar, 5,000 yen is about 33 dollars per user, by our arithmetic.

If each of the 26,739 servers had its own customer, payments would total about 134 million yen, or 0.9 million dollars, by our arithmetic. That is the highest possible total, since GMO pays per customer.

The total leaves out trading losses, and GMO said it cannot yet put a cost on the payments.

What is confirmed and what is not

GMO's notices of the 21st, 23rd and 24th of October confirm the facts above. Posts on X about how the attacker got in are left out.

Key facts

GMO Internet found harmful programs on Onamae.com Desktop Cloud on the 20th of October 2026.

Up to 26,739 servers may be affected.

Every current user gets 5,000 yen, about 33 dollars.

The old service will not come back.