Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected

Hackers breached the infrastructure of Onamae Desktop Cloud, a VPS service provided by GMO Internet, and installed malicious programs on up to 26,739 customer servers. The company detected the intrusion and began shutting down affected servers starting October 21, 2026. While no confirmed data misuse has been reported, customer data may have been exposed, and users are advised to rotate secrets. The attackers may also attempt follow-on phishing campaigns leveraging the incident.

AI-extracted · verify before operational use