Japanese companies are offering compensation to customers affected by cyberattacks as a growing number of security incidents disrupt online services and expose weaknesses in the protection of personal information.
GMO Internet Group and car-sharing operator Park24 have announced customer payments following separate attacks. Japan recorded 723 cybersecurity incidents through October 20, exceeding the annual totals for both 2024 and 2025, according to cybersecurity data.
Why Is GMO Internet Compensating Customers?
GMO Internet Group said customers would receive compensation for losses resulting from unauthorised access following a cyberattack on its foreign exchange trading service.
Chief Executive Masatoshi Kumagai announced that all customers would also receive 5,000 yen ($32) as an initial goodwill payment. The company will provide a free alternative service for six months but has not yet determined the financial impact of compensation and customer payments.
FCRF’s Chief AI Officer Certification Returns on November 14 to Prepare Future AI Leaders
Did Hackers Demand Money?
GMO disclosed that it had received a financial demand from a party believed to be responsible for the attack.
The suspected attackers threatened to disclose company and customer information unless the company complied.
GMO said it would reject the demand and coordinate its response with police and relevant authorities.
How Have Cyberattacks Affected GMO Shares?
Shares of GMO, valued at approximately $2.6 billion, fell nearly 14% to a four-month low, significantly underperforming Tokyo’s benchmark index, which rose 0.3%.
The decline reflected investor concerns surrounding the attack and its potential financial consequences.
How Widespread Are Cybersecurity Incidents?
Japan recorded 723 cybersecurity incidents through October 20, according to TrendAI data.
Satoshi Nagano, president of cybersecurity firm ESET Japan, said higher reporting figures could reflect both growing threats and improved visibility of incidents previously overlooked or undisclosed.
Security experts have also warned that artificial intelligence is helping automate vulnerability scanning and phishing campaigns.
What Compensation Is Park24 Offering?
Park24, which operates the Times car-sharing service, announced payments of 3,000 yen to customers affected by a personal data breach.
The company also said it would stop retaining identity document images after completing registration verification.
Park24 expects extraordinary losses of 5.5 billion yen associated with its response to the attack and compensation payments.
How Is Japan Strengthening Cyber Defences?
Japan has announced plans to establish a team that will simulate cyberattacks using artificial intelligence to identify technological vulnerabilities.
Meanwhile, GMO has requested government cyberdefence measures following the introduction of a new system this month.
The420 Insight: The compensation announcements underline the financial consequences of cybersecurity failures. Beyond service disruption, companies face customer reimbursement obligations, regulatory scrutiny and pressure to strengthen the protection of sensitive information.
Follow for daily updates on cybercrime, corporate fraud, DFIR, hacking, investigations, and digital forensics
