{"rewrite":{"id":"r_8e892143e11baf60285b52d8","clusterId":"c_efc79b7b3658bd336e60744a","slug":"gmo-unauthorized-access-viewer-mirrors-threats-without-feeding-tracker","model":"deepseek-v4-1-flash","headline":"GMO Unauthorized Access Viewer Mirrors Threats Without Feeding Tracker","summary":"Satoru Yano, the developer behind Open 2channel, published a viewer that collects the threatening messages posted by the person believed to have attacked GMO Internet Group's Onamae.com Desktop Cloud and sets them beside GMO's own announcements. GMO puts the number of potentially affected servers at 26,739. The attacker gave notice of a ransomware attack set for 12:00 on Tuesday, October 27, and GMO told customers to back up, disconnect, power off, and unplug.","whyItMatters":"The mirror keeps the extortion text on the record while skipping the tracker on the original page, so the threat stays readable without logging more visitors for whoever posted it.","webCardHtml":"\u003cp\u003eThe attacker\u0026#39;s extortion page embeds a 1x1 tracking beacon, track.php, that logs a visitor\u0026#39;s IP address and environment on the attacker\u0026#39;s side. The mirror does not fetch it.\u003c/p\u003e\u003cp\u003eWhether the claimed damage happened is unresolved. The person believed to be the attacker says customer names were exposed and money taken from accounts. GMO has not publicly confirmed either. GMO\u0026#39;s own figure is 26,739 potentially affected servers, with stored information possibly viewed.\u003c/p\u003e\u003cp\u003eGMO received notice that customer information would be disclosed and a ransomware attack carried out at 12:00 on Tuesday, October 27. Its advice to customers: back up, disconnect from the network, power off, unplug the cables. Yano also posted an analysis of a samples.zip file the perpetrator published.\u003c/p\u003e","blueskyPost":"Satoru Yano's viewer puts the attacker's threats beside GMO's own notices while GMO counts 26,739 potentially affected servers, so readers see the warning and the official response in the same frame.","twitterPost":"Satoru Yano's viewer pairs the attacker's threats with GMO's own notices, against GMO's count of 26,739 potentially affected servers.","threadsPost":"Satoru Yano's viewer sets the attacker's threats beside GMO's announcements, with GMO counting 26,739 potentially affected servers. The attacker's notice sets a 12:00 October 27 ransomware deadline; GMO tells customers to back up, disconnect, power off, and unplug.","newsletterBlurb":"Satoru Yano published a viewer that sets the attacker's threatening messages beside GMO's official announcements about the Onamae.com Desktop Cloud access incident, without loading the original page and its tracking beacon. GMO puts potentially affected servers at 26,739 and told customers to back up, disconnect, power off and unplug ahead of a threatened 12:00 ransomware run on Tuesday, October 27. Whether customer names and funds were taken has not been publicly confirmed.","attributionJson":"[{\"source\":\"GIGAZINE\",\"url\":\"https://gigazine.net/news/20261027-gmo-hacker-seimei-viewer/\",\"title\":\"A 'GMO Unauthorized Access Perpetrator's Statement Viewer' That Lets You Read the Threat Messages Aimed at GMO and Its Users\"}]","lintFlagsJson":null,"lintHits":0,"costUsd":0,"inputTokens":6127,"outputTokens":4473,"status":"published","repairAttempts":0,"nextRepairAt":null,"factsAttemptedAt":1793080281,"createdAt":"2026-10-27T05:49:23.000Z","publishedAt":"2026-10-27T05:49:29.000Z","updatedAt":"2026-10-27T05:49:29.000Z"},"cluster":{"id":"c_efc79b7b3658bd336e60744a","canonicalTitle":"GMOとその利用者に向けた脅迫文が読める「GMO不正アクセス犯の犯行声明文ビュアー」","representativeArticleId":"a_9e940c47c734e6e2067c77b1","sourceCount":1,"writtenSourceCount":1,"writeAttempts":0,"isSolo":true,"entitiesJson":"{\"anime_titles\":[],\"manga_titles\":[],\"work_titles\":[],\"studios\":[],\"people\":[],\"type\":\"news\",\"domain\":\"other\",\"is_roundup\":false}","contentType":"news","status":"published","firstSeenAt":"2026-10-27T04:56:00.000Z","lastSeenAt":"2026-10-27T04:56:00.000Z","updatedAt":"2026-10-27T05:49:27.000Z"},"attribution":[{"source":"GIGAZINE","url":"https://gigazine.net/news/20261027-gmo-hacker-seimei-viewer/","title":"GMOとその利用者に向けた脅迫文が読める「GMO不正アクセス犯の犯行声明文ビュアー」"}],"entities":{"anime_titles":[],"manga_titles":[],"work_titles":[],"studios":[],"people":[],"type":"news","domain":"other","is_roundup":false},"keyFacts":["Satoru Yano published a viewer that pairs the attacker's threatening messages with GMO's official announcements on the Onamae.com Desktop Cloud access incident.","GMO Internet Group says the number of potentially affected servers is 26,739, and information stored on them may have been viewed.","Yano warned that the attacker's page carries a 1x1 tracking beacon that records a visitor's IP address and environment.","GMO advised customers to back up, disconnect from the network, power off and unplug cables after notice of a ransomware attack set for 12:00 on Tuesday, October 27."],"pageLinks":{"healthSlugs":[],"storySlugs":[],"entities":[],"stories":[],"entitiesOk":true,"storiesOk":true}}