GMO Research & AI Loses 950,000 Records in Cyberattack; Points Stolen

GMO Research & AI, a subsidiary of GMO Internet Group, announced on October 6 that hackers exploited a software vulnerability to access its infoQ survey platform, leaking personal data for up to 948,498 members. The breach also resulted in 2.87 million yen in fraudulent Amazon gift code exchanges. The company suspended infoQ on October 3 after detecting the breach and pledged to reimburse all stolen points.

What personal data was exposed

The leaked information includes names, dates of birth, home addresses, phone numbers, email addresses, and encrypted passwords. The company confirmed that credit card numbers and Japanese Individual Numbers (My Number) were not compromised. GMO Research & AI is contacting affected members individually and conducting a detailed review to determine the actual number of people whose information was exposed.

How points were stolen and what happens next

Fraudsters exchanged 2.87 million yen worth of points across 611 unauthorized transactions for Amazon gift codes. GMO Research & AI will fully reimburse all fraudulent exchanges. The company has suspended point-to-Amazon and point-to-GMO Points exchange functions while implementing security fixes before relaunching infoQ.

Software flaw enabled the attack

GMO Research & AI attributed the breach to attackers exploiting a software vulnerability in infoQ. The unauthorized access began on October 2 and was detected on October 3. Cybersecurity experts point to AI-powered hacking tools making attacks easier to execute, with Japan recording 600 unauthorized access incidents from January through September, already surpassing last year’s total of 593.

Broader wave of breaches hitting Japan

GMO’s breach is one of dozens targeting Japanese firms this year. Times Car exposed 6.6 million user records, Daiwa Securities leaked 220,000 customer records, and Yakiniku King’s app exposed 10.79 million records. Discount retailer Mr Max also reported up to 1.73 million customer records compromised. Trend Micro noted that AI-assisted cyberattacks are lowering the technical barrier for hackers, enabling simultaneous attacks across multiple targets.

Final Thoughts

GMO Research & AI’s breach exposes the growing risk of AI-enabled cyberattacks in Japan. With the company reimbursing all stolen points and security experts warning of accelerating threats, investors should monitor how GMO addresses systemic vulnerabilities across its portfolio.

FAQs

Disclaimer:

The content shared by Meyka AI PTY LTD is solely for research and informational purposes.  Meyka is not a financial advisory service, and the information provided should not be considered investment or trading advice.