🚨 MAJOR BREACH: GMO Trust Login exposed 45,000+ user credentials for 9 YEARS

Affected 2,492 companies. IDs, passwords — all accessible externally since 2021 (likely earlier). Discovered only after external security researcher flagged it in September.

This is a config error, not a hack. Which means it sat there, wide open, for nearly a decade.

If you've used GMO-related services (especially in Japan), rotate everything. Now.

Crypto security starts with basic infra hygiene. This is a textbook failure.