2026-10-23
Unauthorized Access to Onamae.com Desktop Cloud (GMO Internet) (26,739 Servers Possibly Affected): Trading Account Logins May Have Been Misused, and What FX and Securities Traders Should Do Today
On October 21, 2026, GMO Internet, Inc. announced unauthorized third-party access to Onamae.com Desktop Cloud, a VPS (virtual private server) service for FX auto-trading, and said a malicious program had been placed in some customers' server environments. 26,739 servers may be affected. From 04:00 on October 21 the company stopped the servers of all plans one after another, and it has not set a restart date. In its second notice of October 22, the company said customers had reported unauthorized operations by a third party on their trading accounts in connection with trading tools used on the service's servers, and that trading account login details and other information saved on the servers may have been obtained by a third party and misused. It consulted the police the same day. The intrusion route is being investigated with a security firm and has not been disclosed. The company asks customers to change the passwords of their trading tools (MT4/MT5 and others) and trading accounts from a device other than the service's servers and then log off, to check their trading history and balance, and to set up two-step authentication. As of October 23 there was no third notice. This site's take: change the passwords now on your broker's official site from your own computer or phone, and check your trading history, balance and withdrawal account. If you see trades you did not make, contact that broker.