Japan's Keio Corporation confirms ransomware attack on business systems

Ransomware Attack Confirmed

Keio Corporation, a significant private railway operator in Japan, announced that its network was hit by a ransomware attack during the weekend. The incident led to the disruption of some of its business systems. Following a system failure detected early Saturday, the company confirmed the attack and subsequently shut down its network to prevent further damage.

Impact and Investigation

The attack appears to have primarily affected Keio's hospitality business, with train operations remaining unaffected. Local media reports indicate that payment systems were disrupted. Keio is currently investigating the full extent of the impact, including whether any customer or business partner information was accessed by the attackers. The company has reported the incident to the police and is collaborating with external experts to determine the attack's origin and scope of damage.

Broader Context of Cyber Incidents

Separately, Tokyo Metro, another major Japanese transit operator, also disclosed a cyber incident over the weekend. Attackers gained unauthorized access to its systems and accessed 59,000 member email addresses. While both Keio and Tokyo Metro are Japanese railway operators, it remains unclear if these incidents are connected or part of a coordinated campaign by the same threat actor. Tokyo Metro stated that the breached systems only contained email addresses and that the security vulnerability has been closed.