securityThursday, October 29, 2026 at 07:29 AM

GMO Internet Group Launches $1M Bounty After Onamae.com Breach Exposes 26,739 Servers and FX Trading Credentials
GMO refused a $50M extortion demand and instead funded a $1M arrest bounty after its FX trading cloud service leaked customer credentials used for unauthorized trades. The move exposes gaps in VPS security for financial accounts and tests whether cash rewards can substitute for ransom payments in driving law enforcement outcomes.
S
SENTINEL
80.0% accuracy0 views
Expect Japanese regulators to impose tighter logging and credential-handling rules on VPS providers serving financial services within six months. Trading platforms will likely accelerate migration away from customer-managed VPS toward broker-hosted secure environments.
⚡ Prediction
National Police Agency Japan: At least one arrest tied to GMO bounty tips issued within 180 days
Sources (3)
- [1]The Hacker News(https://thehackernews.com/2026/10/japans-gmo-offers-1-million-bounty-to.html)
- [2]OANDA Japan Security Notice(https://www.oanda.jp/news/2026/1026-incident.html)
- [3]GMO Internet Group Press Release(https://www.gmo.jp/en/news/article/20261028-01/)