Japan's Onamae Desktop Cloud breach may affect 26,739 servers

Onamae.com Desktop Cloud, a Japanese VPS service operated by GMO Internet, was breached, with malware installed in some customer server environments. The company said on October 20 that an unauthorized third party had accessed the service and installed “malicious programs.”

GMO said it began progressively shutting down customer servers at 04:00 local time on October 21, 2026. All Desktop Cloud plans are affected, and the company has not provided an estimated restart date.

The incident may have exposed data stored on impacted servers. GMO said it has not confirmed any information being misused or leaked. Payment details, including credit card information, are stored on separate infrastructure and are not affected, according to the company.

GMO advised customers who stored secrets such as passwords on their servers to change them, as they may have been compromised. It also warned of an increased risk of phishing and other unsolicited messages. The company said it will never ask for passwords or credit card information by email or phone, and will provide updates as its investigation continues.