As many as 26,739 customer servers at Onamae Desktop Cloud in Japan had malicious software placed on them after hackers breached the provider’s infrastructure, GMO Internet said on October 20. The company said someone without authorization had placed malicious software in some customer settings. Onamae Desktop Cloud is a Japanese virtual private server provider, a virtual machine sold as a service by a hosting provider.
GMO Internet powered down customer servers in stages at 04:00 local time on October 21, 2026, after detecting the intrusion. All Desktop Cloud plans face a service interruption beginning at 4 a.m. local time that day. The company has not provided an estimated restart date for the service.
Onamae.com is operated by GMO Internet, which belongs to GMO Internet Group. Onamae.com ranks among Japan’s largest domain registrars. It additionally offers web hosting, DNS, and other internet infrastructure services.
The provider markets Desktop Cloud byGMO for reliable FX automated trading with uninterrupted MetaTrader 4 (MT4) operation. FX automated trading uses programs to execute foreign exchange trades automatically. MT4 is a trading platform.
GMO Internet said the breach might have exposed data kept on the affected servers. The company has not confirmed any misuse or leak of information. Payment information including credit card details remains unaffected because it resides on separate infrastructure, according to the company. GMO Internet said it will share updates as the investigation progresses and information becomes available.
Customers who kept secrets such as passwords on their servers should change them immediately because they might have been compromised. GMO Internet warned of greater danger from phishing e-mails and other unwanted messages because attackers may use the incident to trick customers into revealing sensitive data. “We will never ask you for your password or credit card information via email or phone,” the company said.
Join the discussion