Summary

  • GMO Internet promises ¥5,000 to every current Onamae.com Desktop Cloud customer and an additional ¥10,000–¥25,000 by category of information it confirms was disclosed, subject to its stated ¥3 million limit per disclosure.
  • It has decided not to restart the affected service on its old infrastructure. The company says the number of eligible customers, disclosure scope and compensable transactions are still unsettled, so it cannot calculate the total financial impact.

Six lines of cost, no sum

A company can publish a price list before it knows how many people are at the counter. GMO Internet's 28 October filing does exactly that. Its table lists six financial responses to unauthorized access to Onamae.com Desktop Cloud. Five sit with the operating company: a flat goodwill payment, compensation for recognized unauthorized trading losses, possible replacement PCs for confirmed ransomware damage, payments tied to confirmed disclosure of customer information, and further support for affected customers. A separate bounty, capped at US$1 million in total, belongs to parent GMO Internet Group. Treating the bounty as a customer payment would put the wrong cost in the wrong company.

The first payment is simple: the 24 October policy promises ¥5,000 to every current customer, whether or not financial harm is established. The second schedule is more discriminating. Confirmed disclosure of different information categories attracts ¥10,000–¥25,000 per category; amounts can be added, with the filing's ¥3 million upper limit per disclosure. GMO says it will contact eligible people individually. Recognized realized losses from unauthorized trades are another claim, assessed using transaction and access records. These are separate obligations with separate tests.

The operating decision could run longer than the payments. GMO says it will not resume Desktop Cloud on the compromised infrastructure. It plans an independent replacement service and six months of free use for customers who choose to migrate. That means the company must build a safe route back to paid service while carrying migration work and foregone subscription revenue. The filing gives no replacement launch date or migration cost. A customer can decline the move; the company says contract and fee treatment for those customers will be announced separately.

The ledger is open because the denominators are open. GMO has not finalized the eligible customer count, confirmed disclosure scope or transactions subject to compensation. Its filing therefore does not quantify consolidated impact. The first useful financial update will pair each payment category with its eligible population, the recognized trading-loss total and a timetable for the replacement service. Until those figures exist, adding the headline amounts produces theatre, not an estimate.

Sources