A cyberattack can leave apps online while freezing money if credentials, balances or records become untrustworthy, as shown by the October 2026 GMO Internet incident.

Continuity depends on verified identity, accurate ledgers and reliable settlement; existing standards already require safe restoration, and AI agents plus shared suppliers heighten the need to separate valid from unauthorized actions.

Firms and regulators should test what share of essential payments remains usable under degraded conditions, with pre-set exit rules, customer notices and limited manual alternatives.

Japan’s October cyberattack, India’s banking warning and a G7 exercise plan expose a neglected resilience test: whether people can safely use their money when financial records or access channels become untrusted.

The next major financial cyberattack may leave the internet running. A customer could still open a banking app and see a balance, yet be unable to pay a bill because the institution no longer trusts the transactions beneath that number. The payment terminal would work. The connection would work. Access to money would not.

That is a hypothetical scenario, not a prediction of an imminent global shutdown. It identifies a less dramatic and more useful risk than the rhetoric of an “internet lockdown”: money can become temporarily unusable while the surrounding digital world appears intact.

Recent events make that distinction urgent. On October 24, Japan’s GMO Internet confirmed unauthorized access to its Onamae.com Desktop Cloud service, exfiltration of customer information and reports of trading-account transactions customers did not recognize. The company had begun suspending the affected service and coordinating with brokers to halt suspect sessions and transactions. A threat attributed to the attacker referenced accounts at more than 70 securities and foreign-exchange firms. That was an extortion claim, not proof that those firms had independently been breached.

The same weekend, Indian Prime Minister Narendra Modi opened a Reserve Bank of India data center and cybersecurity training institute in Bhubaneswar, warning that attacks on an economy can undermine national security. And Japan’s finance ministry confirmed on October 20 that G7 finance authorities had agreed to run a cross-border cyber crisis exercise involving frontier AI in 2027. These are separate developments, not evidence of a coordinated plot. Together they show why financial institutions are treating........

© Eurasia Review