Onamae Desktop Cloud Breach May Affect Up to 26,739 Customer Servers

Summary

GMO confirmed unauthorized access to Onamae Desktop Cloud and malware installation on some customer servers, potentially affecting up to 26,739. The service was shut down; stored data may be exposed, but no misuse or leakage is confirmed.

Key points

GMO confirmed unauthorized access and installation of malicious programs in some Onamae Desktop Cloud customer environments.
Up to 26,739 customer servers may be affected.
The company began shutting down customer servers on October 21, 2026; no service restart date was provided.
Data stored on affected servers may have been exposed, but GMO has not confirmed misuse or leakage.
Payment information is stored on separate infrastructure and was not affected, according to the company.
Customers were advised to rotate passwords and other secrets stored on their servers and to watch for phishing attempts.

Article Details

Victim Organization: Onamae.com Desktop Cloud, operated by GMO Internet
Incident Type: Unauthorized access to cloud infrastructure and installation of malicious programs in some customer server environments
Disclosure Date: 2026-10-20
Data Types Exposed: Data stored on impacted servers; specific data types not disclosed
Affected Records: Up to 26,739 customer servers were affected; the number of records is not disclosed.
Operational Impact: The company progressively shut down customer servers beginning at 04:00 local time on 2026-10-21. All Desktop Cloud plans were to be interrupted, with no restart date provided.
Ransom Or Extortion: None reported
Claim Status: confirmed