GMO Internet (Onamae.com Desktop Cloud) Data Breach
Japanese cloud and domain infrastructure provider GMO Internet, Inc. disclosed in October 2026 that its Windows virtual private server service, Onamae.com Desktop Cloud, suffered a major cyberattack detected on October 20, 2026.
Exposed Data Types
4- User IDs
- Email addresses
- IP addresses
- Passwords
About This Breach
Attackers compromised host management systems and disrupted or encrypted virtual server instances, affecting 26,739 contracted cloud accounts.
Potentially exposed data across affected environments included server user IDs, administrative email addresses, IP addresses, and authentication credentials stored within the virtual desktop infrastructure. GMO Internet isolated the impacted clusters and initiated forensic recovery alongside external security specialists.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
