> JapanHacked_
[Investigating][Severity: Critical][Web app exploit]

GMO Research & AI: unauthorized access to the infoQ survey site

The infoQ survey site run by GMO Research & AI was accessed without authorization from 2 October, and member data was taken. A member's inquiry on 3 October led to the discovery. Attackers exploited a vulnerability in software the site used. The first report gave up to 948,498 records; the second, on 14 October, confirmed 894,082 records with personal data taken. Points worth 2,869,500 yen in 611 exchanges were turned into Amazon gift codes without members' consent; the company will refund them in full.

Disclosed

2026-10-05

Organizations involved

1

Leaked or at risk

948.5K

948,498

Downtime

Unknown

Timeline

  1. Started 2026-10-02
  2. Detected 2026-10-03
  3. Disclosed 2026-10-05
  4. 3 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak][Fraud][Service outage]
Entry point
Web app

Data exposed or at risk

[Name][Gender][Date of birth][E-mail address][Postal address][Phone number][Passwords]

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][Official]当社が運営するアンケートサイト「infoQ」への不正アクセスによる個人情報漏えいに関するお詫びとお知らせGMO Research & AI · 2026-10-05
  2. [2][Official]当社が運営するアンケートサイト「infoQ」への不正アクセスによる個人情報漏えいに関するお詫びとお知らせ（第2報）GMO Research & AI · 2026-10-14