{ "type": "bundle", "id": "bundle--68ee3aa4-fa6a-52a7-8524-1cf1ff0b9343", "objects": [ { "type": "identity", "spec_version": "2.1", "id": "identity--d89eda09-6368-5ccf-871f-1bbf815dd451", "created": "2026-10-22T14:15:36.000398+00:00", "modified": "2026-10-22T14:15:36.000398+00:00", "x_ally_original_id": "org:3fb792f8-bf18-4d08-b12e-7f59924306d2", "name": "GMO Internet, Inc.", "identity_class": "organization" }, { "type": "incident", "spec_version": "2.1", "id": "incident--1162a92a-fff9-59d7-8adf-ea5d144a97f9", "created": "2026-10-22T14:15:36.000398+00:00", "modified": "2026-10-22T14:15:36.000398+00:00", "x_ally_original_id": "inc:c010b008-51d3-4735-adae-b183fca038b9", "name": "Onamae.com Desktop Cloud server compromise" }, { "type": "incident", "spec_version": "2.1", "id": "incident--c4bd6cea-2a10-5b18-826e-1f7476779631", "created": "2026-10-22T14:15:36.000398+00:00", "modified": "2026-10-22T14:15:36.000398+00:00", "x_ally_original_id": "brh:b04821e0-c409-4e34-b3f5-d6209ec21408", "name": "Onamae.com Desktop Cloud server compromise" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--049c3a58-7ae8-553d-824e-b757a48ee638", "created": "2026-10-22T14:15:36.000398+00:00", "modified": "2026-10-22T14:15:36.000398+00:00", "x_ally_original_id": "clm:102ccc69-e65a-4733-8274-83a9ce3c0a10", "relationship_type": "resulted-in", "source_ref": "incident--1162a92a-fff9-59d7-8adf-ea5d144a97f9", "target_ref": "x-ally-event--fd31f586-97ed-5f4f-8fa0-3a03d4da7120", "confidence": 100, "external_references": [ { "source_name": "GMO Internet", "url": "https://www.onamae.com/news/article/11593", "external_id": "cit:302f3470-edc8-4633-93a1-6367f09d5a2a", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:270c725407b6462466ef2088e0f93d5ad732f54c6910d3f6739b8d3e4972948e" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0c5c9081-be51-5573-818f-6275477f6251", "created": "2026-10-22T14:15:36.000398+00:00", "modified": "2026-10-22T14:15:36.000398+00:00", "x_ally_original_id": "clm:f1f5124b-62ac-4393-b3e3-eee07fc508dd", "relationship_type": "resulted-in", "source_ref": "incident--1162a92a-fff9-59d7-8adf-ea5d144a97f9", "target_ref": "x-ally-event--d2cbf566-f372-5aa1-80dc-ecba8690ee75", "confidence": 100, "external_references": [ { "source_name": "GMO Internet", "url": "https://www.onamae.com/news/article/11593", "external_id": "cit:6269e3b7-d6af-4422-ae08-181002219eba", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:270c725407b6462466ef2088e0f93d5ad732f54c6910d3f6739b8d3e4972948e" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2030738b-570a-5343-8dee-44629d45e0e6", "created": "2026-10-22T14:15:36.000398+00:00", "modified": "2026-10-22T14:15:36.000398+00:00", "x_ally_original_id": "clm:7d0e157f-025e-42df-baa6-893a259219eb", "relationship_type": "resulted-in", "source_ref": "incident--1162a92a-fff9-59d7-8adf-ea5d144a97f9", "target_ref": "x-ally-event--3f5da2d2-c2d6-5fb0-8045-1ec929aa24a3", "confidence": 100, "external_references": [ { "source_name": "GMO Internet", "url": "https://www.onamae.com/news/article/11593", "external_id": "cit:814d390e-a82b-44c4-bebc-248e971b5941", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:270c725407b6462466ef2088e0f93d5ad732f54c6910d3f6739b8d3e4972948e" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5128267a-79f5-5314-8845-4b435ce897b1", "created": "2026-10-22T14:15:36.000398+00:00", "modified": "2026-10-22T14:15:36.000398+00:00", "x_ally_original_id": "clm:61cf1b01-4863-44c3-a3a9-9f1acf8c2459", "relationship_type": "resulted-in", "source_ref": "incident--1162a92a-fff9-59d7-8adf-ea5d144a97f9", "target_ref": "x-ally-event--c9ff91c9-e0cc-54ad-8ad7-a6f4349f6b01", "confidence": 100, "external_references": [ { "source_name": "GMO Internet", "url": "https://www.onamae.com/news/article/11593", "external_id": "cit:a1f67e18-cc66-453c-82a3-3118bf3f342e", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:270c725407b6462466ef2088e0f93d5ad732f54c6910d3f6739b8d3e4972948e" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--900e8039-9cee-563c-8359-42f73e388efa", "created": "2026-10-22T14:15:36.000398+00:00", "modified": "2026-10-22T14:15:36.000398+00:00", "x_ally_original_id": "clm:82d7ebae-06dc-40ff-b9e5-56253c7958d1", "relationship_type": "affected-organization", "source_ref": "incident--1162a92a-fff9-59d7-8adf-ea5d144a97f9", "target_ref": "identity--d89eda09-6368-5ccf-871f-1bbf815dd451", "confidence": 100, "external_references": [ { "source_name": "GMO Internet", "url": "https://www.onamae.com/news/article/11593", "external_id": "cit:62b860d6-1ef7-4c3e-b9e5-21c85a1a8f79", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:270c725407b6462466ef2088e0f93d5ad732f54c6910d3f6739b8d3e4972948e" } ] }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--066b6230-1b19-595d-8d14-448ed82bfad2", "created": "2026-10-22T14:15:36.000398+00:00", "modified": "2026-10-22T14:15:36.000398+00:00", "x_ally_original_id": "clm:db98169a-99bb-4976-a9e6-f9a75eb4f75a", "confidence": 100, "external_references": [ { "source_name": "GMO Internet", "url": "https://www.onamae.com/news/article/11593", "external_id": "cit:b52b15d0-0c11-48ab-81a0-7aacd99a9e4a", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:270c725407b6462466ef2088e0f93d5ad732f54c6910d3f6739b8d3e4972948e" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-10-21" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--27d928e8-3d32-5fa4-8aa6-b3f07ac369bf", "created": "2026-10-22T14:15:36.000398+00:00", "modified": "2026-10-22T14:15:36.000398+00:00", "x_ally_original_id": "clm:547954fc-3460-49e2-b25c-dc3fe688e895", "confidence": 100, "external_references": [ { "source_name": "GMO Internet", "url": "https://www.onamae.com/news/article/11593", "external_id": "cit:0da92b7f-3e55-4009-af9f-584217c36f42", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:270c725407b6462466ef2088e0f93d5ad732f54c6910d3f6739b8d3e4972948e" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-10-20" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--2c26b0d7-4102-503c-8c05-f76d27c88b57", "created": "2026-10-22T14:15:36.000398+00:00", "modified": "2026-10-22T14:15:36.000398+00:00", "x_ally_original_id": "clm:95b639c6-3046-450c-a7a5-497928095ff3", "confidence": 100, "external_references": [ { "source_name": "GMO Internet", "url": "https://www.onamae.com/news/article/11593", "external_id": "cit:a7e8ab94-8a51-4d57-a9db-c26d7eae7832", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:270c725407b6462466ef2088e0f93d5ad732f54c6910d3f6739b8d3e4972948e" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-10-22" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--33bbf01f-50ed-56f1-8a79-ce14b763f080", "created": "2026-10-22T14:15:36.000398+00:00", "modified": "2026-10-22T14:15:36.000398+00:00", "x_ally_original_id": "clm:1a6f56e2-9b02-41fe-a176-5e656cb1c593", "confidence": 100, "external_references": [ { "source_name": "GMO Internet", "url": "https://www.onamae.com/news/article/11593", "external_id": "cit:fdcb5b08-0bd6-44fc-bab1-56fe0bf5d423", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:270c725407b6462466ef2088e0f93d5ad732f54c6910d3f6739b8d3e4972948e" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-10-20" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--37eee82c-8867-594e-871f-c2d80aa14df7", "created": "2026-10-22T14:15:36.000398+00:00", "modified": "2026-10-22T14:15:36.000398+00:00", "x_ally_original_id": "clm:7857135e-bd48-47f2-9ecf-f01d49ea10d2", "confidence": 100, "external_references": [ { "source_name": "GMO Internet", "url": "https://www.onamae.com/news/article/11593", "external_id": "cit:922b193f-62d3-4dac-8afe-ada75387fee6", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:270c725407b6462466ef2088e0f93d5ad732f54c6910d3f6739b8d3e4972948e" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "GMO said payment information, including card details, was not held on this service’s servers." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--39802814-d4b4-5610-8a69-a79b58ba1892", "created": "2026-10-22T14:15:36.000398+00:00", "modified": "2026-10-22T14:15:36.000398+00:00", "x_ally_original_id": "clm:96037f2f-5c13-4e2d-8d60-7a32181456bc", "confidence": 100, "external_references": [ { "source_name": "GMO Internet", "url": "https://www.onamae.com/news/article/11593", "external_id": "cit:9d34ccb5-1ac7-4be3-b1cf-2dbf170e5334", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:270c725407b6462466ef2088e0f93d5ad732f54c6910d3f6739b8d3e4972948e" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "GMO asked users to change trading-tool and trading-account credentials from another device, disconnect sessions, inspect balances and transactions, and enable available two-step authentication." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--67be9e79-0b4b-5fec-8975-e992fad9853e", "created": "2026-10-22T14:15:36.000398+00:00", "modified": "2026-10-22T14:15:36.000398+00:00", "x_ally_original_id": "clm:fdca8189-2c9c-454c-9f10-a96101af4b88", "confidence": 100, "external_references": [ { "source_name": "GMO Internet", "url": "https://www.onamae.com/news/article/11593", "external_id": "cit:281d0248-d4d0-4db2-8a40-2ed5db8dbc65", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:270c725407b6462466ef2088e0f93d5ad732f54c6910d3f6739b8d3e4972948e" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-10-21" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--77f4bf02-36f9-581e-863e-fd3d51efc831", "created": "2026-10-22T14:15:36.000398+00:00", "modified": "2026-10-22T14:15:36.000398+00:00", "x_ally_original_id": "clm:e14b03da-f693-4950-b587-af93fadef1a9", "confidence": 100, "external_references": [ { "source_name": "GMO Internet", "url": "https://www.onamae.com/news/article/11593", "external_id": "cit:c88cb542-c607-4e11-8f71-dd8f47ecb43a", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:270c725407b6462466ef2088e0f93d5ad732f54c6910d3f6739b8d3e4972948e" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "GMO stopped all Desktop Cloud plans in stages from October 21 at 04:00 Japan time; the October 22 notice said suspension continued with no restart date." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--8619b266-e1ae-5d08-817d-936173178568", "created": "2026-10-22T14:15:36.000398+00:00", "modified": "2026-10-22T14:15:36.000398+00:00", "x_ally_original_id": "clm:5545c0ac-4506-4238-8b66-2f0c70eb154c", "confidence": 100, "external_references": [ { "source_name": "GMO Internet", "url": "https://www.onamae.com/news/article/11584", "external_id": "cit:5533a456-35a0-4f7a-90ec-44e9642ac65f", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:3afba462b8ba39a0135a426c7f53229057058e9e7c0f2e10b09883c516fa51b4" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The October 21 notice said no misuse or personal-information leakage had been confirmed at that point." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--9ac1e4c2-7465-5c0b-8946-51dcb8bb0e5d", "created": "2026-10-22T14:15:36.000398+00:00", "modified": "2026-10-22T14:15:36.000398+00:00", "x_ally_original_id": "clm:30432fc5-c8fb-42fe-a08e-0730764bbc55", "confidence": 100, "external_references": [ { "source_name": "GMO Internet", "url": "https://www.onamae.com/news/article/11593", "external_id": "cit:590df9e8-32d9-48d7-bd01-bac4ef304569", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:270c725407b6462466ef2088e0f93d5ad732f54c6910d3f6739b8d3e4972948e" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "By October 22, GMO had received customer reports of unauthorized trading-account operations and said stored trading credentials may have been obtained and misused; the full scope remained under investigation." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--cfac3c54-949b-5457-8dfa-9bf593bf642f", "created": "2026-10-22T14:15:36.000398+00:00", "modified": "2026-10-22T14:15:36.000398+00:00", "x_ally_original_id": "clm:f2333a9e-3b6e-4977-b006-d7df8f6b6e4d", "confidence": 100, "external_references": [ { "source_name": "GMO Internet", "url": "https://www.onamae.com/news/article/11593", "external_id": "cit:c3ff0a4c-1acc-44c7-b755-353407e94bf1", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:270c725407b6462466ef2088e0f93d5ad732f54c6910d3f6739b8d3e4972948e" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "GMO confirmed unauthorized programs in some Onamae.com Desktop Cloud customer server environments on October 20; 26,739 servers were potentially affected." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--db8de4ea-5690-5e51-8caf-390c00d90bb9", "created": "2026-10-22T14:15:36.000398+00:00", "modified": "2026-10-22T14:15:36.000398+00:00", "x_ally_original_id": "clm:160e9f67-7937-4eb7-8fce-d2c3b70b65f6", "confidence": 100, "external_references": [ { "source_name": "GMO Internet", "url": "https://www.onamae.com/news/article/11593", "external_id": "cit:573c65ba-21b8-48ea-a2b5-d13afe3e438a", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:270c725407b6462466ef2088e0f93d5ad732f54c6910d3f6739b8d3e4972948e" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "GMO was investigating the intrusion route and scope with security specialists and coordinating with relevant providers." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--e0ca4d47-eaa7-528e-85f6-b28a32684a9f", "created": "2026-10-22T14:15:36.000398+00:00", "modified": "2026-10-22T14:15:36.000398+00:00", "x_ally_original_id": "clm:1d247460-8a46-4932-8018-301d0f9997c1", "confidence": 100, "external_references": [ { "source_name": "GMO Internet", "url": "https://www.onamae.com/news/article/11593", "external_id": "cit:2d215b40-7597-418b-af5e-fce3d7033374", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:270c725407b6462466ef2088e0f93d5ad732f54c6910d3f6739b8d3e4972948e" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-10-19" } }, { "type": "x-ally-event", "spec_version": "2.1", "id": "x-ally-event--3f5da2d2-c2d6-5fb0-8045-1ec929aa24a3", "created": "2026-10-22T14:15:36.000398+00:00", "modified": "2026-10-22T14:15:36.000398+00:00", "x_ally_original_id": "evt:05248d1e-e554-4dae-9709-bbebbc3bbe01", "name": "Malware confirmed; signups and control panel stopped" }, { "type": "x-ally-event", "spec_version": "2.1", "id": "x-ally-event--c9ff91c9-e0cc-54ad-8ad7-a6f4349f6b01", "created": "2026-10-22T14:15:36.000398+00:00", "modified": "2026-10-22T14:15:36.000398+00:00", "x_ally_original_id": "evt:55fe057b-cef9-40ea-b427-28946769fbeb", "name": "Investigation started after customer inquiry" }, { "type": "x-ally-event", "spec_version": "2.1", "id": "x-ally-event--d2cbf566-f372-5aa1-80dc-ecba8690ee75", "created": "2026-10-22T14:15:36.000398+00:00", "modified": "2026-10-22T14:15:36.000398+00:00", "x_ally_original_id": "evt:51f82123-ac14-4ca2-a67b-0c9971b74dbb", "name": "Trading-account warning and police consultation" }, { "type": "x-ally-event", "spec_version": "2.1", "id": "x-ally-event--fd31f586-97ed-5f4f-8fa0-3a03d4da7120", "created": "2026-10-22T14:15:36.000398+00:00", "modified": "2026-10-22T14:15:36.000398+00:00", "x_ally_original_id": "evt:90d02b1b-d022-4ccb-8bd7-c7aed02e21ac", "name": "All-plan shutdown and first notice" } ] }