Japan internet giant GMO says hackers posted stolen customer data
- ID
- 39927
- Status
- summarized
- Published
- 27 Oct 2026, 9:32 PM
- Fetched
- 27 Oct 2026, 9:33 PM
- Provider
- TechCrunch
- Category
- technology
- Original URL
- https://techcrunch.com/2026/10/27/japan-internet-giant-gmo-says-hackers-posted-stolen-customer-data/
- Source URL
- https://techcrunch.com/feed/
Summary
- Score
- 6.0
- Created
- 27 Oct 2026, 9:34 PM
- Tags
- Audience
- developersai_ml_learnersai_agent_userssaas_founders
What happened
GMO Internet is investigating a data leak after suspected unauthorized access to its Onamae cloud desktop service, which provides virtualized desktops to financial traders. The company said an attacker allegedly published customer and business information, that 27,000 servers may be affected, and that customers should reset passwords after reports of unauthorized operations on trading accounts. GMO has not established a connection to Artex, a Chinese AI-enabled penetration-testing tool its cybersecurity unit separately found evidence of in hacks across Japan; CrowdStrike reported Artex was used against South Korean financial institutions in September, with attacks relying on weak controls such as missing MFA.
Why it matters
If you run remote-desktop/VDI or trading-adjacent SaaS, the concrete failure mode cited here is weak security controls such as missing MFA: GMO told customers to reset passwords after unauthorized trading-account operations and said 27,000 servers may be affected. For AI-agent builders, Artex is a dual-use precedent—an AI-enabled pentesting tool linked to bank attacks, after which its developer stopped public updates and made it closed-source—so offensive-security agents need abuse controls before exposure.
Discussion angle
What abuse controls should an AI penetration-testing agent ship with, given Artex was linked to attacks on Japanese and South Korean financial targets and then went closed-source?