HighData breachOct 28, 2026

Cloud Desktop Breach Prompts $1M Bounty After Extortion Refusal

Japanese provider GMO Internet Group is offering a $1 million bounty to identify attackers who breached its cloud desktop service after the company refused an extortion demand. The compromised service hosts remote Windows desktops primarily used for foreign exchange trading. This incident demonstrates that hosted remote desktop services remain high-value targets for cybercriminals seeking leverage through operational disruption.

Data breach security briefing

Who is affected

Organisations and traders relying on GMO's Onamae.com Desktop Cloud, as well as businesses that host critical business functions on remote Windows desktop infrastructure.

How to mitigate it

  1. 1Enforce multi-factor authentication across all remote desktop and virtual workspace access portals.
  2. 2Restrict administrative and remote desktop access using network allowlists and conditional access policies.
  3. 3Deploy 24/7 endpoint detection and response tools across hosted virtual machines to identify suspicious activity quickly.
  4. 4Maintain isolated, tested backups of critical desktop configurations and operational data to reduce extortion leverage.

How Outsource IT solves this

Our managed detection and response and round-the-clock SOC monitoring identify unauthorized access and suspicious behaviour in hosted environments before threat actors can extort your business.

Managed Cybersecurity & Threat Protection

Tags

Cloud SecurityExtortionRemote DesktopData Breach

Source advisory: the-hacker-news

Not sure whether this affects your business?

Outsource IT has been delivering managed services for over 20 years from Burlington, Ontario, supporting organizations right across Canada. Ask our team to review your exposure.

More security briefings

View the full security feed

Testimonials

Don't just take our word for it.

  • We were introduced to Outsource IT at a time when we were interested in improving our IT infrastructure and associated services. In working with Outsource IT; they have rebuilt our confidence in third party IT administration. As CBM grows, we know we are in good hands as we focus on serving our clients.
    Canadian Business MachinesFull service designer and precision metal fabricator.
  • Over the past 8 years, we have received exceptional service from Outsource IT. Their attention to our needs has been prompt and thorough and we are pleased to have them as our ongoing IT service provider.
    Hamilton Family Health TeamOntario's largest Family Health Team with over 150 doctors
  • Outsource IT has brought critical thinking, support and value to our Organization. Their attention to detail and strategic approach leverages I.T. operations to meet today's industry standards. Being EXCEPTIONAL is exactly what Outsource IT has brought to CICC.
    CICCCollege of Immigration and Citizenship Consultants

Technology partners we build on

Certified expertise across the platforms that run Canadian business, from Microsoft and Cisco to Fortinet, Dell and HPE.

  • Microsoft partner logo
  • Cisco partner logo
  • Fortinet partner logo
  • Barracuda partner logo
  • Dell Technologies partner logo
  • HP partner logo
  • Hewlett Packard Enterprise partner logo
  • Lenovo partner logo
  • VMware partner logo
  • Google partner logo
  • Eaton partner logo
  • 3CX partner logo