What happened

Over the weekend Keio Corporation — a big private railway company in Japan — detected a ransomware incident that knocked out parts of its internal systems. The glitch showed up in the early hours of September 26, 2026, and the company quickly shut its network down to stop further damage. They’ve reported the case to the police and brought in outside specialists as part of an investigation into how the attackers got in and what they might have seen.

So far, the disruption seems to be mostly on the company’s hotel and related hospitality side, rather than the train services. Keio’s hotel arm warned customers that some services could be delayed, and local reporting indicated payment systems were affected in places. There hasn’t been a public claim from any extortion group at the time of the company’s announcement.

Why it matters (and what to watch)

This isn’t just a small IT hiccup — Keio isn’t tiny. The firm operates roughly 85 km of track with dozens of stations, runs around 25 hotels, employs over 2,200 people, and posts annual revenues in the billions. Even if rail operations appear intact, any systems outage in a company that size can ripple through bookings, payments, and partner services.

Quick snapshot:

  • Operational impact: Mostly hospitality and customer-facing services; trains reportedly unaffected.
  • Data risk: Keio is investigating whether customer or partner information was accessed.
  • Parallel incident: A separate metro operator disclosed that attackers accessed tens of thousands of member email addresses in a weekend breach — it’s unclear if the two incidents are connected.

What to keep an eye on: updates from the company about the scope of any data access, whether a criminal group takes credit, and whether downstream services (payments, reservations) see further fallout. For customers, the usual: watch your cards and inboxes for odd activity and follow any instructions from Keio or affected hotels.

Bottom line: the outage is a reminder that even transportation companies can be hit where you least expect it — the lobby and booking systems — so complacency is risky. The situation is unfolding, and Keio says it’s investigating with external help.