An attacker gained unauthorized access to Onamae Desktop Cloud, a major VPS provider serving Japan, and deployed malicious software across approximately 26,739 customer servers. On October 20, the company disclosed the intrusion and stated that malware had been installed in portions of its customer infrastructure.

Following discovery of the breach, Onamae began systematically taking servers offline starting at 04:00 local time on October 21, 2026. "We have confirmed that unauthorized access by a third party occurred against Onamae.com Desktop Cloud and that unauthorized programs were installed in some customers' server environments," the company stated in its announcement.

Onamae.com operates under GMO Internet, part of the GMO Internet Group, and ranks among Japan's largest domain registrars while also offering web hosting, DNS services and related internet infrastructure. The compromised Desktop Cloud service targets users seeking reliable environments for continuous operations, particularly those running MetaTrader 4 (MT4) for automated foreign exchange trading.

The breach potentially exposed data residing on affected servers, though GMO has not documented any confirmed cases of stolen information being misused or publicly released. The company stressed that payment credentials remain secure because financial data is maintained on separate infrastructure separate from the compromised systems.

A full service interruption commenced at 4 a.m. local time, affecting all Desktop Cloud service tiers. GMO has not announced a timeline for restoring operations as its investigation proceeds.

Customers who maintained credentials on their servers should immediately change passwords and other sensitive access information, as attackers may have obtained them. GMO also warned of heightened exposure to phishing campaigns and unsolicited contact, as threat actors may attempt to leverage the incident to extract additional sensitive data from affected users.

We will never ask you for your password or credit card information via email or phone

Onamae.com