GMO Hit by Cyberattack, Asks Japan's Government for Help

GMO, a major Japanese financial services provider, has reported unauthorized access to customer accounts used for foreign exchange (FX) trading. The company has confirmed that attackers carried out illegal transactions, with at least one customer losing 2.5 million yen within a single minute.

In response, GMO has announced that it will provide compensation to users who suffered financial losses as a result of the fraudulent trading. The company has not disclosed the total scale of the damage or how many accounts were affected.

GMO suspects that the breach may be linked to a broader pattern of data leaks that have recently affected organizations in Japan, raising concerns that stolen personal information is being exploited for financial fraud. Such incidents, in which previously leaked data is used to carry out new attacks, are sometimes referred to as secondary damage.

Citing the urgency of the situation, GMO has submitted an emergency request to the Japanese government, calling for the swift implementation of so-called 'active cyber defense' measures. This concept refers to a proactive security approach in which authorities monitor and neutralize cyberthreats before they can inflict harm, rather than responding only after an attack has occurred.

Active cyber defense has been under discussion in Japan as part of broader efforts to strengthen national cybersecurity, though its implementation would require new legislation and raises questions about privacy and government surveillance powers. GMO's request suggests that private companies are increasingly looking to the state for stronger protective frameworks against sophisticated online threats.

The incident adds to a growing list of cyberattacks targeting Japanese financial institutions, highlighting vulnerabilities in online trading platforms that handle large volumes of customer funds. Analysts note that FX trading accounts, which allow rapid transactions, can be particularly attractive targets for attackers seeking to move money quickly before detection.

GMO has stated that it is cooperating with relevant authorities to investigate the breach and is taking steps to prevent further unauthorized access. The company has urged customers to remain vigilant and to monitor their accounts closely for any suspicious activity.

The case is likely to intensify debate in Japan over whether current cybersecurity laws are sufficient to protect financial consumers, and whether more active government intervention is needed to counter increasingly sophisticated digital threats.