GMO Aozora Net Bank: unauthorized traffic to its bank API platform; API service stopped twice
Unauthorized traffic to its bank API platform led the bank to stop the API service as a precaution on 10 November and again on the 11th. It reports no data leak or fund outflow.
Every organization listed paused its services as a precaution; none is listed as hit.
Disclosed
2026-11-10
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
Stops and restarts
On 10 November the bank detected unauthorized outside traffic to part of its bank API platform and, as a precaution, stopped the bank API service from 20:42. The traffic subsided and the service resumed at 22:30. [1]
At 01:02 on the 11th it detected unauthorized traffic to the platform again and stopped the service once more, resuming at 06:25 once it judged the service safe. Business customers using the bank API and the end users of services linked to it were affected. The bank says no personal data leaked and no funds were moved. [1]
Timeline
- Detected, Disclosed 2026-11-10
- 1 days
Attack or cause
- Method
- [Unknown]
- Impact
- [Service outage]
- Entry point
- API
Data exposed or at risk
–
Organizations involved
[Precautionary halt][Minor]Tokyo, ShibuyaFinance and insurance
GMO Aozora Net Bank, Ltd.Bank API stopped from 20:42 to 22:30 on 10 November and from 01:02 to 06:25 on the 11th.
Sources
- [1][Official]【解消済】【重要なお知らせ】銀行API接続の一時停止についてGMO Aozora Net Bank, Ltd. · 2026-11-10