Keio Corporation (Japan): ransomware disrupts hospitality and payment systems

What happened

• Keio: “In the early hours of September 26, 2026, we confirmed a ransomware attack on our group’s servers.” Some business systems, reportedly payments and Keio Plaza Hotel Tokyo services, disrupted; railway operations unaffected. No leak confirmed.
• Initial access: not disclosed. No group claim found.

Sources

• https://www.bleepingcomputer.com/news/security/japans-keio-confirms-ransomware-attack-disrupted-business-systems/
• https://www.scworld.com/brief/japanese-railway-operator-keio-hit-by-ransomware-attack

This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.