GMO receives 113 hacker tips, but users fear further leaks

The bounty response adds to an investigation into extortion, while separate disclosures raise concerns about airline passengers' passport and payment details.

Channel: TBS NEWS DIG Powered by JNN ·

JapanStory of October 29, 2026Trari Newsroom

Why this story? One of TBS NEWS DIG Powered by JNN's most watched videos since yesterday, with 138,437 views.

TBS NEWS DIG Powered by JNN: The news channel of JNN, a Japanese news network led by TBS. 3.4M subscribers and 5.7B views.

身代金要求のハッカー集団のサイト停止　GMOの“懸賞金払う”呼びかけに113件の情報　JALでも9万件の情報漏えいか…一部はパスポート情報も【news23】｜TBS NEWS DIG

Things we can learn from the video

Press to jump

0:00Japan Airlines says a contractor breach may have exposed customer records, including some passport details.
0:40Skyticket's operator reports leaked bank details and possible exposure of credit card information.
0:59GMO's CEO offers a $1 million bounty for information identifying the hackers.
2:37Sugiura suggests a US domain-service organization suspended the hackers' site after abuse reports.
3:26Affected users fear further publication; software traces discussed afterward do not establish the attackers' nationality.
5:11GMO reports 113 tips within six hours, and Kumagai says he has consulted Interpol.

GMO Internet Group says its appeal for information identifying the hackers targeting it brought 113 tips within six hours. But users interviewed in Japan's TBS NEWS DIG Powered by JNN report describe a threat that has not disappeared with the attackers' website: their stolen information could still circulate elsewhere.

CEO Masatoshi Kumagai offered a $1 million bounty for information identifying the attackers and said he had consulted Interpol. He also directly warned social media accounts reposting stolen personal information that they could face criminal complaints if they failed to remove it.

The report follows the disappearance of the hackers' disclosure site, which had threatened to publish more information each day after saying GMO had refused negotiations. Japan Hacker Association representative Takayuki Sugiura suggests a US organization managing the domain may have suspended service after receiving abuse reports. Who secured the shutdown remains unclear. Kumagai publicly thanked a person who said they had reported the site.

Sugiura also examines traces left in documents released by the attackers. They appear to have used Kingsoft's Chinese-made spreadsheet software, but he stresses that the software is widely available and does not establish that the attack originated in China.

The broadcast opens with separate disclosures affecting travelers. Japan Airlines announced that unauthorized access at booking-system contractor Amadeus may have exposed about 92,000 people's personal information. Passport numbers and nationality details may have been included for roughly 2,000 people. The affected group held reservation records between August 10, 2023, and September 23, 2026.

Adventure, which operates booking website Skyticket, separately announced the exposure of around 32,000 records containing personal information, including bank details. It also warned that roughly 930,000 records containing credit card and other information may have leaked.

For GMO users, taking the disclosure site offline offers only partial reassurance. One man worries the attackers could turn to more aggressive methods of publication. A woman fears her information could already be sold on hidden websites. Another man says he has consulted police and a security company because the consequences could reach his family.