GMO GlobalSign

GMO GlobalSign, a security certificate company under the GMO internet group, has confirmed that customer information was left accessible from outside its systems for close to nine years, according to NHK reporting. The incident involves an extended exposure of personal data despite the firm operating in the cybersecurity field, and the long duration is drawing criticism and attention in Japan.

GMO Trust Login, a single sign-on service run by GMO GlobalSign, stored files from administrators' bulk operations in a public storage area used for serving logos. Anyone could list and download them from November 2017 to September 2026. Reports say files covering 45,030 people at 2,492 organizations were affected, raising concerns about how long the exposure went unnoticed.