Onamae.com Desktop Cloud (Japan): operator says a third party gained unauthorised access and planted malicious programs in some customers' servers, with up to 26,739 servers possibly affected; all plans are being shut down from 21 October
In a notice on Onamae.com dated 21 October 2026 (status as of 4:00 Japan time, 3:00 am Perth), the operator of Onamae.com Desktop Cloud apologised and said a third party had gained unauthorised access to the service, and that on 20 October it confirmed malicious programs had been installed in some customers' server environments. The notice says information stored on the servers may have been viewed and puts the number of servers that may be affected at 26,739; it says that so far it has not confirmed any leak of customers' personal information it holds or any misuse of viewed information, and that it does not hold payment information, including credit card details. To prevent further damage, the operator says it began shutting down customers' servers in stages from 4:00 on 21 October, covering all Desktop Cloud plans, and will announce a restart date once it is decided; its investigation of customer servers continues. It asks customers who stored or used credentials such as IDs and passwords on their servers to change them promptly, including anywhere the same password is reused, and warns of phishing emails and suspicious contacts exploiting the incident, saying it never asks for passwords or card details by email or phone. According to BleepingComputer, Onamae.com is operated by GMO Internet, part of GMO Internet Group, and the Desktop Cloud service is marketed for running MetaTrader 4 automated FX trading.
- Product
- Onamae.com Desktop Cloud (all plans)
- Versions
- n/a — hosted service incident
- Exploited in Australia?
- unknown
- Patch to
- If you use Onamae.com Desktop Cloud: change any IDs and passwords stored or used on your servers, and the same passwords anywhere else you reuse them (operator's notice, 21 Oct). Ignore emails or calls asking for passwords or card details. Treat data stored on the servers as possibly viewed.
Primary: Onamae.com — Desktop Cloud unauthorised access notice (Japanese, 21 Oct 2026, as of 4:00 JST) · BleepingComputer — Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected (21 Oct 2026)