Technology · NEWS EXPLAINER
Japan cyberattack fallout moves into customer compensation
GMO Internet will pay every affected desktop-cloud customer ¥5,000 and review unauthorized-trading losses. Park24 has set a separate ¥3,000 remedy for a defined group of Times Car users after its breach investigation.
Japanese companies are moving from incident response to customer compensation after separate cyberattacks. GMO Internet and Park24 have published different eligibility rules, payment amounts and follow-up measures.
GMO says every current Onamae.com Desktop Cloud customer will receive ¥5,000, while verified losses from unauthorized transactions will be assessed separately. Park24 says customers whose encrypted identity-document images showed forensic traces of both access and external transmission will receive ¥3,000 in cash or vouchers.
Two compensation models, not one industry formula
GMO chose a universal goodwill payment for current users of the affected desktop-cloud service, then separated that payment from individual claims for verified unauthorized-trading losses. Park24 limited its payment to a forensic subset of Times Car users. The contrast shows that “compensation” can mean a broad goodwill payment, a loss-based claim, or a narrowly defined breach remedy.
What GMO customers should expect
GMO said it would email eligible customers at their registered addresses by October 30 with contact, payment and scheduling details. It said a separate application process for unauthorized-transaction losses would be announced by November 6. The company also said it cut network connections to affected systems and blocked external access routes.
What Park24’s eligibility language means
Park24’s October 23 update focuses on customers whose encrypted driver’s-license or other identity-document images showed traces of access and external transmission. The company explicitly cautioned that encrypted storage means those traces do not automatically establish that image contents were readable. Customers should rely on direct notices rather than assume all Times Car accounts qualify.
The financial effect is becoming measurable
Reuters reported that Park24 expects a ¥5.5 billion extraordinary loss covering incident-response and compensation costs. That figure turns the breach from a technical event into a disclosed financial consequence, while the GMO program creates a separate operational burden through universal notices and individual loss reviews.
What remains unresolved
Neither payment program establishes the final legal or total economic cost of its incident. Eligibility reviews, individual loss claims, future disclosures and any regulatory or legal action can change the total. This report records the programs announced as of October 26, not a final damage estimate.
