GMO Group Urges Customers to Shut Down PCs Following Onamae Desktop Cloud Breach
Threat actor threatens ransomware attack, prompting urgent security advisory
Key Takeaways
- GMO Group has urged customers to disconnect systems from the internet and shut down computers following a breach of Onamae Desktop Cloud.
- A threat actor is reported to be threatening a ransomware attack following the breach.
- The specific vulnerability exploited and the extent of the compromise are not yet disclosed.
- Immediate system isolation is the recommended mitigation while investigations proceed.
- The timing and validity of the ransomware threat claim remain unconfirmed.
Quick answers
- What happened?
- GMO Group has advised customers to disconnect systems from the internet and shut down computers after a threat actor breached the Onamae Desktop Cloud service and threatened to launch a ransomware attack. The advisory was issued amid reports of active exploitation and imminent risk of ransomware deployment.
- Which products are affected?
- Onamae Desktop Cloud
- What should defenders do?
- Customers are advised to immediately disconnect affected systems from the internet and shut down computers. GMO Group recommends following official guidance and monitoring for updates regarding patches or further advisories. Organizations should review network segmentation and access controls for cloud services.
GMO Group, a Japanese technology conglomerate, has issued an urgent advisory to its customers following a security breach of the Onamae Desktop Cloud service. According to reports, a threat actor who gained access to the platform is threatening to launch a ransomware attack. In response, GMO Group has urged customers to immediately disconnect their systems from the internet and shut down their computers to mitigate potential impact. The company has not disclosed the specific vulnerability exploited, the nature of the breach, or whether any data has been exfiltrated. The advisory emphasizes immediate isolation of affected systems as the primary mitigation step while investigations continue. The timing of the alleged ransomware threat, described as "today" relative to the publication date, remains unverified. Security researchers and affected parties are advised to monitor official GMO Group channels for further updates regarding patch availability, the scope of the breach, and any indicators of compromise.
Security Details
A threat actor breached the Onamae Desktop Cloud service operated by GMO Group and is threatening to launch a ransomware attack. No specific vulnerability or exploitation method has been publicly detailed. The threat is described as imminent, but confirmation of active ransomware deployment is pending.
Affected products
Onamae Desktop Cloud
Mitigation
Customers are advised to immediately disconnect affected systems from the internet and shut down computers. GMO Group recommends following official guidance and monitoring for updates regarding patches or further advisories. Organizations should review network segmentation and access controls for cloud services.
Sources
BleepingComputer
Japan's GMO urges customers to shut down PCs amid ransomware threat
Oct 27, 2026 · 23:35
Original link
Related Security News
UNM Health Sciences Center Ransomware Attack Disrupts Patient Care and Surgeries
The University of New Mexico Health Sciences Center confirmed a ransomware attack on October 27, 2026, that caused widespread system outages, disrupted patient care and surgeries, and impacted academic activities. The incident remains under investigation with no official disclosure regarding the ransomware variant, threat actor, or extent of data exfiltration.
