In brief
Sources attribute a cyberattack on Japan’s biggest internet services company to a North Korea-linked hacking group. The strike targeted the GMO Internet Group’s servers, with U.S. and Japanese intelligence agencies investigating. The incident may have disrupted internet services across Japan.
A hacking group tied to North Korea is believed to have carried out a cyberattack on Japan’s GMO Internet Group, the country’s largest internet services provider, said Kyodo News.
Sources confirm that the attack targeted the company’s servers and was powerful enough to cause significant disruption to internet services across Japan.
The incident is currently under investigation by both U.S. and Japanese intelligence agencies, which are collaborating to determine the full scope and origin of the breach.
Kyodo reported that the attackers appeared to have employed advanced techniques to infiltrate the GMO Internet Group network, suggesting a high level of sophistication.
So far, no official statement has been released by the company or by any government agency regarding the outcome of the investigation.
While the exact timing of the breach remains unclear, reports indicate that it began earlier this week, coinciding with a period of increased cyber activity worldwide.
Kyodo’s analysis points to North Korea as the most likely source, citing intelligence that the attack shares hallmarks common to known state-sponsored groups from that country.
Experts warn that even a brief outage in a major internet services network can ripple across businesses, consumers, and governmental operations in Japan.
The ongoing probe by U.S. and Japanese agencies is expected to yield further details as the investigation proceeds.
Additional reports from cybersecurity firms suggest that the attackers may have exploited a previously unknown vulnerability in the networking software used by the GMO Internet Group, allowing them to bypass standard security protocols.
Sources say the use of the Zero‑day vulnerability in the company's routing software was a key factor in the intrusion, a tactic often associated with state-sponsored operations.
In response, the GMO Internet Group has reportedly increased security monitoring across its infrastructure and is working with international partners to patch any remaining weaknesses.
Japan’s Ministry of Internal Affairs and Communications has urged internet users to remain vigilant and keep their software up to date, as unauthorized access could compromise personal data.
