GMO Aozora Net Bank temporarily suspended its banking API service twice from the evening of November 10 until the morning of November 11. This was because unauthorized communication from outside was detected targeting its banking API connection infrastructure, and was described as “a preventive measure to ensure security.” No leakage of personal information or unauthorized outflow of funds has occurred.
From GMO Aozora Net Bank’s notice
It “detected unauthorized communication from outside” and suspended the banking API at 8:42 p.m. on November 10. After confirming that the unauthorized communication had subsided, the service resumed at 10:30 p.m.
However, it again detected unauthorized communication targeting the banking API connection infrastructure and suspended the banking API again at 1:02 a.m. on November 11. After confirming that safety had been ensured, the service resumed at 6:25 a.m.
The suspension also affected external services using the bank’s banking API. At cryptocurrency exchanges such as Binance Japan and Coincheck, Japanese yen deposits via GMO Aozora Net Bank became temporarily unavailable, while cloud accounting services such as freee’s “freee Transfer” were also temporarily suspended.
