Ransomware Disrupts Keio Business Systems; Tokyo Metro Reports 59,000 Email Addresses Exposed

· Original article ↗

Summary

Keio confirmed a ransomware attack disrupted some business systems, with train operations unaffected; it is investigating possible data access. Separately, Tokyo Metro said attackers accessed systems containing 59,000 member email addresses.

Key points

  • Keio confirmed a ransomware attack on its servers after a system failure and shut down its network to limit further damage.
  • The disruption appears limited to Keio’s hospitality business; train operations were not affected. Local media reported payment-system disruptions.
  • Keio is investigating the attack’s route and impact, including whether customer or business-partner information was accessed; it reported the incident to police.
  • No ransomware group had claimed responsibility for the Keio attack at the time of publication.
  • Separately, Tokyo Metro disclosed unauthorized access to systems containing 59,000 member email addresses; it said those were the only data in the affected systems.
  • Tokyo Metro said it identified and closed the security weakness used in the incident. Whether the two events were connected is unclear.

Article Details

Victim Organization
Keio Corporation
Incident Type
Ransomware attack
Incident Date
2026-09-26
Operational Impact
Keio shut down its network to prevent further damage. The incident disrupted some business systems and appears to have mainly affected its hospitality business; train operations were not affected. Local media reported disruption to payment systems. Keio is investigating whether customer or business partner information was accessed.
Ransom Or Extortion
Keio confirmed a ransomware attack. No ransomware group was found claiming the attack at the time of reporting; no ransom demand or extortion activity was reported.
Claim Status
confirmed

Countries

Industries