GMO Desktop Cloud Breach: CEO Admits Security Warnings Were Raised Before the Hack

On October 25, Masatoshi Kumagai, head of GMO Internet Group, published a statement on the breach of Onamae.com Desktop Cloud. He admitted that the company’s own security specialists had flagged problems with the service before the attack, but the fixes came too slowly and did not go far enough.

What’s New

Kumagai said the team weighed how the changes would affect service availability and balanced them against other work. He acknowledged that the organization did not turn its specialists’ knowledge into effective protection.

He also clarified that GMO will cover all losses from unauthorized transactions linked to the breach once the company has verified them, even when a financial intermediary refuses to issue a refund. This does not mean any compensation has been paid yet.

An Older Incident, a New Statement

The breach itself had already been made public before this week. The news on October 25 is that leadership admitted earlier warnings did not lead to the service being secured quickly enough, and clarified who is responsible for customer losses.

SecurHUB’s Take

Every audit finding needs an owner and a deadline for remediation. As part of incident response, organizations should preserve records of earlier reports and of the decisions made about fixing them.

Sources: Masatoshi Kumagai’s October 25 post, ASCII.jp