Overview
- Keio said a ransomware attack hit its group servers in the early hours of Saturday, Sept. 26, and the company disconnected affected systems, reported the incident to police, and launched an investigation with external cybersecurity experts.
- The disruption has mainly hit Keio’s hospitality and sales systems, with Keio Plaza Hotel warning customers of longer response times for inquiries and reservations while train services continue to run normally.
- Tokyo Metro disclosed that an unauthorized party accessed about 59,000 email addresses from its Metpo loyalty scheme, said it closed the exploited weakness, and warned riders to watch for phishing attempts.
- Times Car earlier reported a separate breach on Sept. 25 that may have exposed personal data for up to 6.6 million current and former members, including identity and driver license details, raising large-scale fraud risks.
- So far there is no public claim of responsibility, no confirmed data leak at Keio, and no established link between the three incidents, but police and outside firms are investigating and customers should expect follow-up alerts and possible scams.