--- title: "GMO Internet Group Offers Up to $1M Bounty for Hackers Who Stole Forex Service Client Data" description: "Japanese IT group GMO Internet Group has offered a reward of up to $1 million for information on hackers who stole client data from its cloud forex service and promised compensation to victims." date: 2026-10-28T19:58:09.516Z lang: en url: https://xab.info/en/posts/gmo-internet-group-1m-bounty-hackers-data-leak tags: [gmo-internet-group, cyberattack, data-breach, ransomware, forex, cybersecurity] author: "Alexander Buran" publisher: "XAB.info" --- # GMO Internet Group Offers Up to $1M Bounty for Hackers Who Stole Forex Service Client Data ![Signage with the blue GMO logo against the backdrop of an office building in Japan](https://xab.info/media/2026/10/28/gmo-internet-group-1-mln-za-hakerov-utechka-dannyh/gmo-internet-group-1-mln-za-hakerov-utechka-dannyh-1.webp) ## Key Points - GMO Internet Group has offered up to $1 million for information leading to the identification of the hackers. - Hackers demanded a $1 million ransom by noon on October 27 and published a portion of client data. - GMO confirmed the leak of presumptive personal data and urged against spreading it. - The company promised compensation of up to 3 million yen (about $19,000) for each user data breach instance. - Hackers have threatened to publish additional client information. Japanese IT conglomerate GMO Internet Group has announced a reward of up to $1 million for information leading to the identification of hackers involved in unauthorized access to the company's cloud services. The decision comes amid an ongoing data breach incident involving client accounts managed through a cloud platform that facilitates automated foreign exchange trading and other transactions. GMO stated that the company will never meet the attackers' demands and intends to hold those behind the attack publicly accountable. ### Attack Timeline and Ransom Demand According to the company, unauthorized third-party access to its cloud service was detected last week. During the same period, GMO reported unauthorized transactions on several client accounts. The hacking group claiming responsibility for the attack demanded a $1 million ransom by noon on October 27, threatening to leak client data if the demand was not met. On the afternoon of October 27, the group reportedly posted personal user information online, claiming the company had missed the deadline. ### Confirmed Personal Data Leak GMO confirmed that information presumed to contain client personal data has been posted online. The company urged the public not to publish or share this information on social media or other channels to prevent its further spread. Thus, part of the data leak has been acknowledged by the company itself, not just the hackers, confirming the incident from both sides. ### Victim Compensation and Management Stance On the evening of October 27, announcing the bounty plan, GMO stated it would pay each affected user compensation of up to 3 million yen (approximately $19,000) for each data breach incident involving their information. At the same time, the company emphasized that it has no intention of yielding to the attackers' demands and views the up to $1 million reward as a tool to identify those responsible for the attack rather than a settlement form. ### Client Risks and Further Threats Despite this stated position, hackers have threatened to publish additional client details, raising concerns among platform users. For cloud forex service clients, this means an increased risk of repeated leaks and potential financial losses, while for the company, it entails conducting investigations, compensating for damages, and curbing the further spread of already published data simultaneously. The situation remains fluid, and GMO's next steps will depend on the results of internal and external investigations into the incident. ## Fact-Check & Sources - [За информацию о личности хакера предлагается вознаграждение в размере 1 миллиона долларов.](https://www.vietnam.vn/ru/treo-thuong-1-trieu-usd-cho-viec-xac-dinh-tin-tac) - The primary source contains all key facts: reward amount (up to $1M), ransom demand ($1M by noon on Oct 27), GMO's confirmation of the data leak, compensation up to 3 million yen (~$19,000), and hacker threats. ## FAQ ### What reward has GMO Internet Group announced? Up to $1 million for information leading to the identification of hackers involved in unauthorized access to the company's cloud services. ### What exactly was stolen? As confirmed by GMO, information presumed to contain personal data of cloud forex service clients was posted online; unauthorized transactions on several client accounts were also reported. ### How much will GMO pay affected clients? Up to 3 million yen (approximately $19,000 USD) for each instance of a user's information being leaked. ### Did the company pay the hackers a ransom? No. GMO stated it will never fulfill the hackers' demands, despite them publishing part of the data after the deadline expired.