On October 29, GMO Internet Group Chairman and CEO Kumagai Masatoshi said that vital information that could help identify the perpetrators involved in a cyberattack against the Japanese internet services company has been obtained.

Kumagai announced on his X account that in addition to information submitted from the public, GMO’s white-hat hacker team has obtained valuable information that could play a role in identifying the culprits.

A day earlier, GMO launched a bounty website seeking information concerning who may be behind the cyberattack and received about 270 tips as of 11:30 a.m. on October 29.

GMO plans to submit its findings to the police and relevant authorities in the hope of leading to prompt arrests and international wanted notices.

Kumagai also revealed that GMO executives apologized to the family of an individual whose personal information was exposed.

He said spreading the victim’s exposed information will not be tolerated, adding that criminal complaints will be filed against anyone who disseminates the data.

GMO continues to warn the public not to access information published by those behind the cyberattack, explaining that doing so is dangerous.

Following the cyberattack, GMO had been threatened by suspected attackers who warned they would continuously publish customer information unless they were paid about 8 billion yen.

On October 27, information said to contain a customer's personal data was posted on a website by the attackers.

But on October 28, GMO said on its website that it confirmed that the domain of the perpetrator’s website has been taken down.

At noon that day, it launched the bounty website offering up to 1 million dollars in total rewards for information provided.

The site says, “We will never give in to the extortion demands.”

Six hours after the site’s launch, 113 tips had been received.

Meanwhile, a contractor for Japan Airlines that handles a passenger service system was hit by unauthorized access.

According to Japan Airlines and other sources, Amadeus IT Group was subjected to unauthorized access and there were traces indicating that some customers’ reservation information had been viewed by external parties.

Those potentially affected are approximately 92,000 people who had flight reservations with Japan Airlines and other carriers between August 10, 2023, and September 23, 2026.

Of those, the reservations numbers and names of about 90,000 people may have been accessed, while passport numbers and contact information of about 2,000 people may have been exposed.

Officials said no credit card numbers or passwords were leaked, and no unauthorized use of the data has been confirmed so far.

Japan Airlines says it will contact affected customers individually in the coming days.

Between October 26 and 27, personal information leaks were also confirmed across services including Rakuten Travel, Resona Bank and the Shinkansen bullet train reservation system Smart EX.