GMO Hit with ¥7.9 Billion Ransom Demand, Refuses to Pay — Data Leaked; 5ch: ‘Just Give the Hacker ¥100 Million, LOL’

From our other sites

The story

Masatoshi Kumagai, president of GMO Internet Group, revealed on his blog that a hacker group had demanded roughly ¥7.9 billion in ransom, but that he refused to pay. After the deadline passed at noon on October 27, the attackers began actually publishing customers’ personal information one record at a time, and the company’s stock price dropped 19% over two days. GMO announced it will launch a bounty program worth a total of $1 million for informants starting at noon on the 28th. On 5ch, discussion centered on how effective police can really be against an attack from overseas, the size of the bounty, and how little compensation is being offered to users whose personal data was leaked.

What people said

1AnonymousOct 27, 2026 15:52
An utterly despicable threat:
"Continued unauthorized manipulation of customers' [systems]"
"Unauthorized disclosure of information on connected customers' PCs, and a ransomware attack"
36AnonymousOct 27, 2026 16:05
Back around 2005, I think it was on the PC Self-Build board, someone warned 'Don't use Naver Japan-affiliated (now A Holdings), GMO, Baidu, or CyberAgent' — thanks for that, whoever you were.
That same guy said Horiemon [Takafumi Horie] was fine though, and I've just kept ignoring that part the whole time.
37AnonymousOct 27, 2026 16:06
Re: #36
LOL, GMO Internet is right there on the list
52AnonymousOct 27, 2026 16:34
You put off patching your own security holes and now you're dragging the government and your own personal sense of justice into it?
62AnonymousOct 27, 2026 16:53
Re: #52
Exactly this.
They kept ignoring warnings from their own in-house engineers, right?
Clean up your own mess.
53AnonymousOct 27, 2026 16:35
60AnonymousOct 27, 2026 16:47
If the hackers are overseas, Japanese law enforcement can't reach them anyway
63AnonymousOct 27, 2026 17:00
Re: #60
This'll probably trigger a change in the law.
If it doesn't, Japan's just going to keep being an easy target.
94AnonymousOct 27, 2026 17:45
96AnonymousOct 27, 2026 17:49
Re: #94
Who exactly do you think you are to say that
114AnonymousOct 27, 2026 19:03
The police are powerless once it's overseas, so for them to sound this confident, maybe they're planning a legal reform?
115AnonymousOct 27, 2026 19:04
Re: #114
They're saying something about fighting hackers across borders, but that's not realistic.
I don't think anyone overseas is going to lift a finger to help.
117AnonymousOct 27, 2026 19:07
Did the hackers actually publish personal info?
Apparently there's a name 'Eiko' involved,
but no matter how much I searched I couldn't find anything more.
121AnonymousOct 27, 2026 19:20
Re: #117
They did.
She was even interviewed on the news.
118AnonymousOct 27, 2026 19:07
Apparently it's under attack
131AnonymousOct 27, 2026 19:38
Re: #118
Japan's furious F5-mashing (angrily spamming the refresh key)
126AnonymousOct 27, 2026 19:29
President Kumagai revealed on his blog that a hacker group had at one point demanded a ransom of roughly ¥7.9 billion, but said he flatly refused to pay.
After today's noon deadline passed without payment, the attackers retaliated by publishing one customer's personal information, and are threatening to release another one every day from now on.
In the wake of this large-scale unauthorized access and ransomware threat, GMO Internet Group's stock price plunged 19% over two days.
154AnonymousOct 27, 2026 19:58
Re: #126
Huh, it hasn't dropped as much as I expected.
I figured it'd hit limit-down.
146AnonymousOct 27, 2026 19:54
Re: #1
Apparently if you identify the perpetrator you get ¥100 million.

We are establishing the 'GMO Cybercrime Eradication Bounty' to solicit credible information that helps identify and apprehend those involved and get to the bottom of the case.
The reward is capped at a total of $1 million USD across the whole program, and the dedicated tip line will start accepting information from 12:00 noon (Japan time) on October 28, 2026.
151AnonymousOct 27, 2026 19:56
Re: #146
Just give the ¥100 million to the hacker, lol
159AnonymousOct 27, 2026 20:00
Re: #146
They're supposedly the top dog in the industry and they're relying on random tipsters, lol
198AnonymousOct 27, 2026 20:29
Digital Minister Furukawa, addressing the public:
'I want people to have the mindset of protecting their own information themselves.'
219AnonymousOct 27, 2026 21:12
Re: #198
It's companies that won't even let you use their service unless you hand over personal info,
and every single one of them has security full of holes, Mr. President.
205AnonymousOct 27, 2026 20:35
The government: 'Even if hackers demand money from you, don't pay — report it to the police.'
209AnonymousOct 27, 2026 20:36
Re: #205
KADOKAWA: 'We paid up and still got leaked, and we reported it to the police and they still couldn't make an arrest.'
220AnonymousOct 27, 2026 21:13
Re: #205
GMO's users couldn't even get their victim reports accepted by the police,
since officially, the 'victim' is GMO, not them.
233AnonymousOct 27, 2026 21:52
https://funakamome.com/i/7fHSL8J.jpg
271AnonymousOct 28, 2026 09:04
Re: #1
There's Kumagai, smiling, posting on X first thing in the morning.
Hackers, tremble in your sleep.
274AnonymousOct 28, 2026 09:06
Re: #271
Totally flexing that he's unfazed, lol
276AnonymousOct 28, 2026 09:33
Re: #271
How is he able to laugh this much? https:/i.imgur.com/GkWneOr.jpeg
277AnonymousOct 28, 2026 09:45
Congrats on the successful deletion
An arrest must be close
280AnonymousOct 28, 2026 10:06
284AnonymousOct 28, 2026 10:23
A person sharing the same name as the one in the leaked information gave a pool interview to reporters on the 27th, saying 'Most of what's written is nonsense' and stating that he had 'never once' used GMO's cloud service.
https://www.yomiuri.co.jp/national/20261027-GYT1T00367/

288AnonymousOct 28, 2026 11:07
Re: #284
Well, if he admitted it was true, he'd also be admitting to the porn sites and all the kinks that go with them

Background and Key Points of This Story

This incident is believed to be a ‘double-extortion’ style ransomware attack, in which attackers break into a corporate network, steal data, and threaten to publish it unless paid. Because the attackers appear to be based overseas, it’s practically very difficult for Japanese police to track them down, and the thread saw comments like ‘domestic Japanese law doesn’t reach overseas hackers.’ The $1 million bounty GMO has set up is easy to misunderstand — it isn’t a payment to the attacker, but a reward for informants whose tips help lead to an arrest, and it is a separate thing from the roughly ¥7.9 billion ransom that was demanded. It’s also worth remembering that in KADOKAWA’s earlier case of paying a ransom under a similar scheme, paying up prevented neither the data leak nor the need for an arrest — so paying doesn’t necessarily guarantee a resolution.

※This article is compiled as an excerpt and summary of the 5ch (Hello! Project board) thread “GMOƒCƒ“ƒ^[ƒlƒbƒg‘ã•\ŒF’JuƒnƒbƒJ[‚Íâ‘΂ɋ–‚³‚È‚¢AƒnƒbƒJ[‚ð‘ߕ߂·‚é‚͓̂ú–{‚Ì‹`–±v“.

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *