GMO Trust Login exposes information on 45,030 people at 2,492 companies
Errors in the design and configuration of GMO Trust Login's public storage exposed customer and contract information relating to 45,030 people at 2,492 companies. Customer information files had been available for external viewing and download since 2017, and records confirmed third-party downloads from 2021 onwards. The investigation found that the information included names, email addresses, employee numbers and affiliations, while passwords for the service and SSO integrations were not affected.
Key facts
- Affected organisation
- GMO Trust Login
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Customer and contract information relating to 45,030 people at 2,492 companies
- Cause / method
- Storage design and configuration errors that left customer information files in a public logo repository
- Location
- Japan
If your data was exposed
Exposed dataNameEmail
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- The final investigation established that the exposure affected 45,030 people at 2,492 companies and confirmed records of third-party downloads.
- It was disclosed that customer files had been available for external download for approximately nine years and that third parties had actually obtained the files.
7 related reports
- GMO Trust Login: Data Breach Expands to 2,492 Companies and 45,030 People
- GMOトラスト・ログインの情報漏洩(2026年)|第三報の対象範囲と設定不備
- GMOトラスト・ログインで情報漏えい、対象2,492社・45,030人に拡大 公開ストレージの設定不備が原因
- GMOトラスト・ログインの情報漏えい|2,492社・45,030人 公開ストレージの設定不備 管理者が確かめること 2026
- ロゴ画像用の公開領域に顧客ファイルも保存 GMO系シングルサインオン、4.5万人分漏えい
- GMO Trust Login: An SSO Service Left Customer Files in Its Public Logo Storage for Nine Years
- Ransomware attacks on Japanese companies more than double in 5 years
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.