{
  "id": 16694647,
  "title": "Japanese virtual desktop cloud hacked so hard it asks to be banned",
  "url": "https://urgent.news/2026/10/27/japanese-virtual-desktop-cloud-hacked-so-hard-it-asks-to-be-banned",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-27T01:06:22.000Z",
  "source": {
    "name": "The Register Science",
    "slug": "the-register-science",
    "url": "https://www.theregister.com/security/2026/10/27/japanese-virtual-desktop-cloud-hacked-so-hard-it-asks-to-be-banned/5305610"
  },
  "original_language": "en",
  "account": "Japanese ISP GMO Internet has reported a massive security breach in their virtual desktop cloud service called Onamae.com Desktop Cloud. The service, primarily used by foreign exchange traders, was infiltrated by a malicious third party who installed harmful programs into the server environments of some customers. This breach led to unauthorized operations on trading accounts, potentially exposing users' passwords and trading information. In response, GMO advised customers to change their trading account passwords, preferably using a separate device not used for trading purposes.\n\nThe company has since disclosed that its systems contained security vulnerabilities, unauthorized access, and customer data being exfiltrated. Some customers have even reported unrecognized transactions in their accounts. In an alarming turn of events, GMO received a ransom demand from the attacker - $50 million - threatening to expose sensitive information about the company and its customers if they refused to pay.\n\nIn light of the incident, GMO has offered a token consolation payment of ¥5,000 ($32) per affected user and pledged to reimburse any trading losses caused by the breach. CEO Masatoshi Kumagai acknowledged that the payment was merely a gesture of goodwill, stating that it would not resolve the issue. He vowed to invest in a free alternative environment for six months, overhaul the system infrastructure, and conduct a thorough investigation with external experts' assistance.\n\nHowever, Kumagai admitted that the company's response to the breach was insufficient in speed and depth, allowing the attackers to exploit the vulnerability. He also revealed that the company had previously received warnings about the service's security from their own white-hat hackers. Kumagai expressed regret that despite having skilled professionals on staff, they failed to fully capitalize on their expertise to implement effective defenses.\n\nKumagai pointed out that advancements in AI technology have made cyberattacks more accessible, enabling anyone with the right tools to launch attacks. He called for public-private partnerships to improve cybersecurity across Japan and submitted a proposal to the government for proactive cyber defense measures. The CEO emphasized that refusing to pay the ransom would not guarantee the removal or prevention of the stolen information misuse.",
  "summary": "CEO admits service used for foreign exchange trading had holes company was slow to fix",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}