GMO hack: account compromises real, ransomware encryption still unconfirmed
jd_pressman · x · 2026-10-27
A short reply post whose screenshot breaks down the reported GMO Internet extortion incident in Japan (as of Oct 27, JST):
- Compromised accounts confirmed: customers reported unauthorized trades via brokerage/FX accounts; GMO announced compensation
- Ransomware unconfirmed: attackers threatened to encrypt customers' PCs on Oct 27, but GMO found no malware, including ransomware, on the computers examined so far
- Public leak: at noon the attackers published material purportedly containing one customer's personal data; authenticity still being verified
The poster notes that even if the threat is a bluff, the attack idea is now out there.
More from Safety
- System prompts aren't a security boundary: Reddit debates how much access AI agents should get — Putrid_Ad734 · 2026-10-27
- CA eMudhra blocks curl/wget User-Agents from CRL endpoints, Mozilla bug filed — kingslyj · 2026-10-27
- 300 Agents, 60 People: Runlayer Found Engineer Details Real-World Agent Security Failures — AI Engineer · 2026-10-27
- Abliterated LLM finds $3,300 in live ElevenLabs keys; OpenAI/Anthropic keys already drained — deedydas · 2026-10-27
- Tailscale confirms serious Tailworm SSH flaws; fix due within 24 hours — AIFlow_ML · 2026-10-27
- OpenAI details how it locked down frontier training environments and red-teamed them with its own agents — AxSaucedo · 2026-10-27