As detailed in Bleeping Computer, hackers compromised the infrastructure of Onamae Desktop Cloud, a prominent Japanese virtual private server provider, resulting in the installation of malicious programs on up to 26,739 customer servers.
The incident, confirmed by the company on Oct. 20, 2026, prompted an immediate response. Beginning at 4 a.m. on Oct. 21, 2026, the firm initiated a progressive shutdown of affected servers to contain the threat. Onamae.com, operated by GMO Internet, noted that while the breach potentially exposed data stored within the compromised environments, payment information remains secure on separate infrastructure. The service is frequently utilized for automated trading, making the compromise particularly sensitive for users managing financial tools. Although the company has not confirmed any data leaks or misuse, it has advised all affected customers to rotate passwords and remain vigilant against phishing attempts. The firm emphasized that it will never request sensitive credentials via email or phone. As the investigation continues, the provider has not established a timeline for restoring full service. This event highlights the persistent risks to cloud infrastructure, where unauthorized access can lead to rapid deployment of malicious software across thousands of customer environments, necessitating robust security protocols and proactive credential management.
Source: Bleeping Computer
