Photo by Manuel Cosentino on Unsplash
Paying a ransom is a short-term fix for a long-term reputation problem. Most companies talk a big game about security until they are staring down a $50 million demand and a ticking clock. GMO Internet just showed us what it looks like to actually take the hard road.
After a significant breach of their Onamae.com Desktop Cloud platform, where attackers managed to plant malicious programs directly into customer environments and exfiltrate data, GMO publicly refused the ransom demand and made a radical choice: they aren't bringing the old system back. Instead of patching a sinking ship, they are moving affected customers to a completely separate cloud infrastructure and offering six months of free service to bridge the gap. They are even putting up a $1 million bounty for information leading to the arrest of the perpetrators.
The Infrastructure Tax
This is a fascinating business move because it bypasses the "recovery theater" we usually see after a VPS breach. Typically, a provider spends weeks scrubbing VMs, hoping they caught every backdoor, and then resumes billing while crossing their fingers. GMO’s decision to decommission the platform in its current form suggests they’ve done the math on trust. They know that once a hypervisor or management layer is deeply compromised, the cost of verifying total integrity is often higher than the cost of starting over.
For the broader hosting industry, this is a wake-up call regarding the fragility of legacy VPS architectures. We have spent twenty years layering automation on top of virtualization, and when that management stack gets owned, the blast radius is massive. By moving users to a different cloud environment, GMO is effectively acknowledging that some technical debt is too expensive to refinance after a fire.
I find it refreshing to see a company put a $1 million bounty on the table rather than lining the pockets of a digital extortionist. It’s a bit like refusing to pay a kidnapper and instead hiring a private army to find them; it might not be the cheapest route, but it’s certainly the one that makes people think twice before targeting you again.
The Long Game
In an era where "cyber insurance" often dictates that companies should just pay the ransom to minimize downtime, GMO is taking the opposite stance. They are eating the migration costs and the lost revenue to ensure their future environment is clean. It’s a gut-wrenching decision for any CEO, but it’s the only way to rebuild a brand that’s been hit this hard.