The company disclosed the incident after the intrusion was detected, and the attack affected portions of its internal operations rather than its rail services. Details on the specific ransomware strain, the initial access vector, and whether any data was exfiltrated have not been made public at this time.

Key points so far:

• Keio is a major private railway operator in Japan.
• The ransomware attack occurred over the weekend.
• Some business systems were disrupted as a result.
• The company has confirmed the incident publicly.
• No specific ransomware group, CVE identifier, or data theft details have been disclosed.

As with most confirmed intrusions, affected organizations typically work with external incident response teams and law enforcement before releasing full technical details.

Source: BleepingComputer

Does your organization have a ransomware playbook ready in case a critical business system is hit over a weekend?