GMO's Onamae Desktop Cloud breach disrupts thousands of customer servers
Attackers broke into Onamae Desktop Cloud's infrastructure and placed malicious software in as many as 26,739 customer environments. GMO Internet began shutting down affected servers on October 21 and warned that data on those systems may have been exposed, though no misuse has been confirmed. Payment card data was stored separately and was not affected, and customers were urged to change any secrets kept on the servers.
Onamae Desktop Cloud is a GMO Internet virtual-server service promoted for round-the-clock workloads such as automated MetaTrader 4 trading. Its operator also provides domain registration, web hosting, and DNS services, so the disruption touches customers depending on broader internet infrastructure.
GMO reported that an intruder placed harmful code in some customer setups and then began taking all Desktop Cloud plans offline at 4 a.m. local time on October 21. No restart date was given. Payment-card records were kept on separate systems, but customers were advised to change stored credentials and be wary of phishing.
The disruption could affect small businesses and individual administrators who depend on the virtual servers for trading, hosting, or other continuous tasks. Outages may interrupt operations, while exposed credentials could enable follow-on intrusions or convincing phishing. Because payment data was separated, financial exposure may be narrower, but trust in outsourced infrastructure may still suffer. Customers should treat the incident as a prompt to review access controls and monitoring.