GMO Internet Stock Plunges After Cyberattack on FX Trading Service

Shares of GMO Internet Group (TYO:9449) plunged on Monday following the disclosure of a serious cyberattack on one of its cloud services. The breach has left the company facing an open-ended financial liability to cover customer losses, prompting a significant investor sell-off.

Details of the Security Breach

The attack targeted the company's "Onamae.com Desktop Cloud," a foreign exchange margin trading service. According to a company disclosure, the incident involved unauthorized access to customer server environments, which resulted in the execution of fraudulent trades within client accounts.

In a public apology on October 25, CEO Masatoshi Kumagai acknowledged that internal engineers had previously identified security vulnerabilities that were not sufficiently addressed. The company also stated that a ransom demand related to the breach was disclosed on October 24.

Financial Impact and Investor Concerns

The primary driver of Monday's stock decline is the unknown financial cost of the incident. GMO Internet has pledged to compensate affected customers in two ways:

Ad

• A goodwill payment of 5,000 yen to every customer using the compromised service.
• A commitment to cover all trading losses that resulted from the unauthorized transactions.

This second pledge represents a significant, unquantified liability that markets are struggling to price. The uncertainty surrounding the total cost of covering these fraudulent trades has created substantial concern among investors.

Market Reaction

GMO Internet Group's stock closed down 13.6% at ¥3,256 in Tokyo trading on Monday. The steep drop significantly underperformed the broader Japanese market, as the TOPIX index fell a more modest 0.8% during the same session. In response to the attack, the company also formally requested that the Japanese government strengthen the nation's proactive cybersecurity defenses.