Sources say a North Korea‑linked hacking group is likely responsible for the cyberattack that targeted the servers of Japan’s GMO Internet Group, the country's largest internet services company, according to reports that emerged on Thursday, a short time after the incident took place on Tuesday afternoon. The attack allegedly involved a breach that disrupted services hosted on the company’s infrastructure, potentially affecting nationwide internet availability.
Confirmed reports indicate the attack occurred on Tuesday, damaging portions of GMO Internet Group’s server network and disrupting its operations during the early hours. U.S. and Japanese intelligence agencies have announced they are investigating the incident, with officials citing the potential link to a North Korea‑associated hacking unit.
Sources have reported that the cyberattack may have caused significant disruption to internet services across Japan. The scale of the impact is still being assessed by telecom operators under investigation, while the extent of downtime remains unreported at this time.
The attribution to a North Korea‑linked group remains unconfirmed and the investigation is ongoing. Analysts await further forensic evidence before drawing definitive conclusions, the same report added, while the U.S. and Japan continue collaborative efforts to secure critical infrastructure.
Both governments have confirmed they are coordinating with GMO Internet Group to assess damage, respond to service disruptions, and reinforce security protocols. The incident highlights the ongoing threat posed by state‑backed hacking entities in the region, emphasizing the need for robust cyber defenses.
The incident has prompted increased scrutiny of Japan's internet infrastructure, with officials encouraging businesses and users to monitor for suspicious activity. As the investigation continues, additional details are expected to emerge, potentially clarifying the full scope of the attack and any link to the alleged North Korean operatives.
