Japan's GMO Internet Group launches $1 million bounty to track cloud breach hackers

GMO Internet Group, a major Japanese provider of domain registration and cloud services, announced a reward program that could total up to one million dollars for information that leads to the identification and prosecution of the hackers who penetrated its Onamae.com Desktop Cloud platform.

The intrusion was detected earlier this month when unusual activity was observed on the cloud service that hosts a range of client applications, including tools used for foreign‑exchange trading. The attackers issued an extortion demand, but GMO declined to pay, opting instead to pursue legal avenues.

By refusing the ransom, GMO joins a growing number of firms that consider payment to cyber‑criminals a risky precedent that rarely guarantees data recovery or future safety. The company has coordinated with Japanese law‑enforcement agencies and cybersecurity specialists to trace the breach back to its source.

The bounty scheme opened on October 28 and stipulates that any payout will be made only if a tip directly results in an arrest, conviction, or other measurable disruption of the perpetrators’ operations. Details of the reward structure have not been disclosed, but the total pool is capped at one million dollars.

Security experts note that cloud environments used for financial services, such as FX trading platforms, present attractive targets because they handle sensitive transaction data and require continuous availability. A breach of this nature can undermine client confidence and expose users to potential financial loss.

Analysts caution that while the bounty may incentivize whistleblowers or insiders to come forward, it could also prompt attackers to shift focus toward less protected firms. GMO said it will continue to monitor the situation closely and work with authorities to prevent further compromise, emphasizing its commitment to safeguarding customer data and restoring trust in its cloud offerings.