Did GMO Cybersecurity’s outage costs outweigh its bounty and solatium payouts?
GMO announced a $1 million bounty and customer payments after attackers leaked data and demanded billions.
Key points
- Attackers demanded 8 billion yen and threatened further disclosures.
- according to the published report, cited 1 trillion yen in damages attributed to Binance.
GMO Cybersecurity launched a bounty program with a maximum total of $1 million on 28 October, seeking information that leads to identifying the perpetrator of the breach.
The announcement
GMO confirmed the installation of malicious programs in some server environments on 20 October and began suspending related functions.
The context
On 27 October, attackers disclosed information, and GMO announced a policy not to comply with the demands. The company requested customers to disconnect PCs from the network and shut down power following a notice of additional attacks. GMO’s white hat hacker team announced plans to submit key information to police and other authorities on 29 October.
Reading between the lines
The attacker’s notice of additional attacks prompted GMO to ask customers to disconnect their terminals. The company began analysis of terminals entrusted by customers on 26 October. The suspension of the information disclosure site’s domain was confirmed on 28 October.
The business case
This figure is separate from the GMO incident details. GMO began individual contact with customers regarding solatium payments and alternative services on 30 October. The source does not link the Binance damage figure to the GMO incident or discuss vendor choice implications for AI architects.
Why it matters
- AI platform architects must distinguish between separate incidents when evaluating vendor risk, as the source lists Binance and GMO damages separately.
- The $1 million bounty and solatium payments represent direct costs incurred by GMO after the breach.
- The 8 billion yen ransom demand highlights the financial pressure attackers exert during unauthorized access events.
- The 1 trillion yen figure attributed to Binance serves as a separate data point for market damage, not GMO’s liability.
Topics: cybersecurity, GMO, Binance, data breach, bounty
Updated
Numbers in context
Circle area is proportional to the magnitude; labels retain signs. Figures may describe different measures. Read their contexts above.Did this article give you the evidence you needed?
Your choice stays on this device. No public tally.Terms in this story
solatium
A payment made to customers for losses or inconvenience due to unauthorized transactions.
white hat hacker
An ethical hacker who uses skills for defensive purposes, such as submitting information to authorities.
bounty program
A reward system offering payments for information leading to the identification of perpetrators.
Questions readers ask
What was the ransom demand?
The attacker demanded approximately 8 billion yen in a threatening email received on 21 October.
Connected stories
Reading receipt
- Attackers demanded 8 billion yen and threatened further disclosures.
- according to the published report, cited 1 trillion yen in damages attributed to Binance.
Still open: What is the total cost of the solatium payments and alternative services?
Still open: Will the bounty program lead to the identification of the perpetrator?