Japanese internet services firm GMO Internet Group faces fallout from a suspected breach, with attackers reportedly posting alleged customer information and demanding money. Multiple outlets report GMO warns customers about an impending ransomware threat, including steps such as disconnecting systems from the internet and shutting down computers, while the company verifies claims that customer data has been posted.
Several reports also say the company is refusing to pay a ransom, and that attackers have disclosed at least some personal information with further leaks threatened. In parallel, GMO asks Japan to use “active cyber defense” powers, according to filings cited by outlets, requesting state agencies help trace, block, or neutralise attackers’ infrastructure.
Financial market coverage focuses less on the malware aspect and more on the impact to trading activity. Bloomberg reports Japan’s retail FX market largely continues despite the hack, with some investors reportedly closing accounts. Across outlets, the main differences lie in emphasis—ransom and data leakage details versus malware precautions and government response—rather than core facts about the breach and GMO’s actions.