Which companies just had a verified incident, who lends to them and who owns them. Every claim carries its evidence level and its source. How we decide what is confirmed
GMO Internet
hosting / retail FX brokerage · Japan
What happened
Desktop Cloud management infrastructure and customer VPS; FX trading credentials stored on desktops; customer data published by the attacker; possibly files on users' own PCs via default-on drive sharing.
Unauthorized FX trades emptied individual accounts (press examples: about JPY 500,000 lost in 45 seconds, account left with JPY 47; JPY 550,000 in 19 seconds); service down since 21 Oct; FX brokers restricted accounts.
Confirmed affected parties
- Customers of five FX firms named by the Finance Minister on 27 Oct
What remains unknown
- Total yen loss
- Number of affected users and brokers beyond the five named
- Number of servers actually compromised
- Whether crypto exchange API keys were taken
- Restart date
- Attribution (North Korea link reported by Kyodo, not confirmed by GMO)
Losses: unknown in total; GMO gave no loss total at the 2 Nov conference; individual losses of about JPY 0.5M reported by press
Capital around this company
- Parent companyGMO Internet: matters concerning the controlling shareholder (27 Mar 2026, Japanese)GMO Internet Group (9449)
GMO Internet Group holds 90.59% of GMO Internet's voting rights (as of 31 Dec 2025). Market-value effect on the parent is our inference and is not shown as a loss.
Sources
- Japanese online service company GMO apologizes for security breaches and promises compensation (AP via ABC News) · 2026-11-02
- Web search (Japanese): GMO conference loss totals; ENCOUNT, Asahi, Sankei, ABEMA via Yahoo News Japan; innovatopia · 2026-11-02
- innovatopia: GMO conference, Cyber Aegis and full compensation (baseline) · 2026-11-02
- GMO Internet timely disclosure 2 Nov 2026 (executive pay cuts) (baseline) · 2026-11-02
- Finance Minister press conference 27 Oct 2026 naming five FX firms (baseline) · 2026-10-27
- OANDA Securities third report on unauthorized logins and trades (baseline) · 2026-10-26
- Japan FSA press release menu FY2026 (items 30 Oct to 2 Nov) · 2026-11-02
Does GMO Internet touch your portfolio?
We map a company or a whole book against verified incidents: the lenders, owners and providers around each holding, with what is confirmed and what is not.