Malware was found in GMO’s Onamae.com Desktop Cloud VPS service for automated foreign-exchange trading, raising the possibility that trading credentials were viewed or abused. The company progressively stopped servers and said it would compensate unauthorized-trading losses attributable to the intrusion. It also promised ¥5,000 to every user regardless of financial damage. That payment is separate from compensation, not its ceiling. Guidance calls for changing trading-tool and account passwords, ending existing sessions, checking balances and enabling multifactor authentication. The total financial impact has not yet been established.