In October 2026, GMO Internet Group Chairman and President Masatoshi Kumagai issued a public blog apology after the company’s cloud service suffered a security breach that compromised login credentials for foreign exchange trading accounts, affecting an estimated 26,739 server environments as unauthorized parties accessed underlying user data.
The Bottom Line
- Server Exposure: The breach targeted the “Onamae.com Desktop Cloud” service, leaving 26,739 server environments potentially exposed according to data reported by JBpress.
- Financial Remediation: Management confirmed that the firm will fully reimburse verified trading losses resulting from the unauthorized account access once internal assessments conclude.
- Strategic Pivot: Following internal warnings regarding system vulnerabilities, leadership is rolling out six months of free substitute services and partnering with external security specialists to overhaul the technical infrastructure.
Kumagai Acknowledges Ignored Internal Warnings
The security failure originated within the “Onamae.com Desktop Cloud” architecture, a cloud service utilized by investors to execute automated forex strategies via platforms like MetaTrader. Internal engineers had previously flagged specific security deficiencies within the infrastructure to management. Kumagai admitted in his blog post that the company failed to implement sufficient countermeasures ahead of the breach.
GMO Internet Group CEO Masatoshi Kumagai says that the internet itself is on the verge of collapse due to missuse of AI, and frames this event as a national crisis. https://t.co/bHAMtZL8Mp pic.twitter.com/INkqLzvqaC
“We take the fact that we have exposed our customers’ valuable assets and information to danger with the utmost gravity,” Kumagai wrote, noting that competing operational priorities and concerns over service continuity caused the firm to miss critical defensive windows. Attackers exploited these exact operational gaps after unauthorized programs were deployed into select server environments on October 20, prompting the company to suspend all plans sequentially starting October 21.
Cloud Hosts Centralize Credentials for Automated Trading Platforms
Writing for JBpress, Ken Kagoshiki, representative director of Medu Inc., noted that while VPS setups insulate traders from home power outages or connection failures, they simultaneously centralize critical login credentials. Because platforms like MT4 and MT5 rely on EA execution, the compromise of a cloud host can lead to account manipulation.
The total exposure figure of 26,739 servers, recorded as of October 24, measures the scope of the affected hosting architecture rather than confirmed financial extractions. However, the operational paralysis forced
SITUATION DETECTED: Following the massive cyberattack on Japan's GMO Internet Group, which led to fraudulent trades across 70+ brokerages and FX platforms, CEO Masatoshi Kumagai warns that the internet itself is on the verge of collapse. Masatoshi Kumagai (Japanese billionaire, CEO of GMO internet group which just suffered a massive cyberattack): “The cyberspace that I built with my colleagues, believing it would bring smiles to people’s faces, is now on the verge of being completely destroyed by malicious… https://t.co/5kuJCPCPPP” HOLY. GMO Internet Group CEO Masatoshi Kumagai says: 'Right now, the internet itself is starting to break.''In fact, an investigation by our group's GMO Cybersecurity by Ierae has confirmed that at the source of unauthorized access targeting roughly 20 Japanese companies,… https://t.co/heEbxGM1qQ
More on Masatoshi Kumagai
