2026 Onamae.com Desktop Cloud (GMO Internet) — unauthorised access; up to 26,739 customer servers shut down
Data compromised
Data on affected servers may have been exposed; the company has not confirmed misuse or leakage. Payment data is reported to be held on separate infrastructure and unaffected.
Technical writeup
Verified company notice (announced Oct 20, 2026): "We have confirmed that unauthorized access by a third party occurred against Onamae.com Desktop Cloud." Malicious programs were found in some customer environments. Customer servers were shut down in stages from 04:00 JST on Oct 21 after the intrusion was detected; all Desktop Cloud plans are suspended with no restart date. Up to 26,739 customer servers are affected per the article body (the headline rounds to 27,000). The company tells customers to change any passwords or secrets stored on their servers and warns of phishing; it says it will never ask for passwords or card details by email or phone. Initial access, malware family and exfiltration are not described. recordsAffected 0 (servers, not records).
Root cause
Not disclosed. Company confirmed unauthorised third-party access to the Desktop Cloud VPS service and that malicious programs were installed in some customer environments.