Ransomware Disrupts Keio Business Systems; Tokyo Metro Reports 59,000 Email Addresses Exposed

Summary
Keio confirmed a ransomware attack disrupted some business systems, with train operations unaffected; it is investigating possible data access. Separately, Tokyo Metro said attackers accessed systems containing 59,000 member email addresses.
Key points
- Keio confirmed a ransomware attack on its servers after a system failure and shut down its network to limit further damage.
- The disruption appears limited to Keio’s hospitality business; train operations were not affected. Local media reported payment-system disruptions.
- Keio is investigating the attack’s route and impact, including whether customer or business-partner information was accessed; it reported the incident to police.
- No ransomware group had claimed responsibility for the Keio attack at the time of publication.
- Separately, Tokyo Metro disclosed unauthorized access to systems containing 59,000 member email addresses; it said those were the only data in the affected systems.
- Tokyo Metro said it identified and closed the security weakness used in the incident. Whether the two events were connected is unclear.
Article Details
- Victim Organization
- Keio Corporation
- Incident Type
- Ransomware attack
- Incident Date
- 2026-09-26
- Operational Impact
- Keio shut down its network to prevent further damage. The incident disrupted some business systems and appears to have mainly affected its hospitality business; train operations were not affected. Local media reported disruption to payment systems. Keio is investigating whether customer or business partner information was accessed.
- Ransom Or Extortion
- Keio confirmed a ransomware attack. No ransomware group was found claiming the attack at the time of reporting; no ransom demand or extortion activity was reported.
- Claim Status
- confirmed
Countries
Industries
HospitalityKeio Corporation confirmed a ransomware attack on its servers that disrupted some business and hospitality systems, while train operations were not affected.RailwayKeio Corporation (Keio), a major private railway operator in Japan, said its network was hit by a ransomware attack over the weekend, disrupting some of its business systems.
