Reports say a GMO subsidiary flagged the exploited vulnerability two years ago; the government has yet to answer the first request to invoke active cyber defence

NHK reported on 31 October, citing people familiar with the matter, that a security subsidiary of GMO Internet Group had pointed out the vulnerability in the Onamae.com Desktop Cloud service two years before the intrusion that may have affected up to 26,739 servers. GMO will hold a press conference on 2 November; as of 31 October the government had not announced its response to GMO's 24 October request to apply "active cyber defence". Prime Minister Takaichi told a ministerial meeting on 26 October that the government would strategically select response options including "access and neutralisation measures", and the emergency package is due in the first week of November.