GMO tells customers to shut down PCs after breach, cites ransomware threat

· Cybersecurity · Japan

Japan's GMO Group urged customers to disconnect their systems from the internet and shut down computers after a threat actor who breached the company's Onamae Desktop Cloud threatened to launch a ransomware attack. The warning points to an active intrusion into a cloud desktop service used by the group's customers, with the attacker publicly threatening to escalate to ransomware. The company's guidance — disconnecting and powering down machines — is an unusual defensive step that suggests it could not guarantee protection for connected endpoints. The immediate effect is disruption for customers relying on the Onamae Desktop Cloud, who are being asked to take their systems offline while the threat is addressed.

Why it matters：When a cloud desktop provider tells customers to power down, it shows how a single supplier breach can force mass defensive shutdowns across an entire customer base, a growing risk as more work moves to hosted environments.

Key points

  • The threat actor breached GMO's Onamae Desktop Cloud service.
  • The attacker threatened to launch a ransomware attack, prompting the warning.
  • Customers were told to disconnect from the internet and shut down computers.

Sources (original reporting)

More stories from this day