Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected

Hackers compromised the infrastructure of Onamae Desktop Cloud, a popular provider of VPS services in Japan, and installed malware on up to 26,739 customers' servers.

The company confirmed on October 20 that an unauthorized third party installed "malicious programs" in some customer environments.

After detecting the intrusion, the company says it progressively shut down customer servers beginning at 04:00 local time on October 21, 2026.

“We have confirmed that unauthorized access by a third party occurred against Onamae.com Desktop Cloud and that unauthorized programs were installed in some customers’ server environments,” reads the announcement.

Onamae.com, operated by GMO Internet, a member of GMO Internet Group, is one of Japan’s largest domain registrars and also provides web hosting, DNS, and other internet infrastructure services.