Sources say a hacking group linked to North Korea is probably responsible for a recent cyberattack that targeted servers of Japan’s GMO Internet Group, the largest internet services company in the country. The attack, which may have caused significant disruption to internet services across Japan, is being investigated by U.S. and Japanese intelligence agencies.
GMO Internet Group, headquartered in Tokyo, is a leading provider of online services—including e‑commerce, online gaming, digital advertising and cloud services—making it a vital part of Japan’s internet infrastructure. The company’s servers have been under attack, according to sources, triggering disruptions nationwide.
U.S. intelligence officials, along with their Japanese counterparts, are investigating the incident to determine exactly which North Korea‑linked group carried out the operation and to assess the extent of the damage. The investigation is ongoing, and publicly available details about the tactics or tools used remain limited.
While the exact motive of the attack has not yet been disclosed, analysts suggest that the disruption of a major internet services provider could have widespread effects on retail, financial, and governmental digital operations in Japan. The situation remains fluid as agencies work to confirm the attackers’ identity and scope of impact.
The incident adds to the growing concerns about state‑backed hacking activity in the region, as other major nations have likewise expressed alarm over similar incidents. As the investigation proceeds, experts anticipate that further details will emerge, potentially outlining the methods used by the suspect group and whether additional cyber‑attacks could follow.
Both the U.S. and Japanese governments have released statements praising the resilience of Japanese internet infrastructure, though they have also underscored the need for robust cyber defence measures. The agencies are coordinating to mitigate the current disruption while preparing for potential future threats.
At this time, GMO has not issued a public statement detailing the full scope or nature of the breach. The company’s leadership is reportedly working closely with both U.S. and Japanese intelligence to assess the damage and restore full services as quickly as possible.
Cyber‑security experts note that the timing of the attack, coinciding with diplomatic tensions in the region, could signal a broader pattern of cyber‑hostile activity. Analysts say that, given the potential for significant economic and social impact, monitoring of the situation remains high priority for all stakeholders involved.
United Nations and regional partners have called for increased cooperation in cyber‑defence, especially as incidents such as this one highlight the need for shared threat‑intelligence and rapid response protocols.
As the situation develops, stakeholders will closely watch for any signs of further activity from the suspected group, as well as for broader regional implications. The investigation, ongoing, may bring more clarity to the attackers’ identity, methods, and objectives in the coming days.
