Japan's Largest Taxi Operator Nihon Kotsu Hit by Cyberattack, Disrupting Services
Nihon Kotsu, Japan's largest taxi operator, has shut down significant parts of its IT infrastructure following a cyberattack, impacting dispatch systems and booking services.
Nihon Kotsu, the largest taxi and chauffeur service operator in Japan by revenue, has confirmed that its internal IT systems were compromised by a cyberattack. The incident, which began early Saturday morning, forced the company to take emergency measures, including disconnecting systems to prevent further damage and disruption.
The attack has had a substantial impact on the company's operations. Key services such as car hire, web booking, reservation management, and the telephone dispatch service are currently unavailable. The company's extensive fleet, comprising over 8,500 taxis and two thousand chauffeur vehicles, is affected by the operational standstill.
In response to the disruption, Nihon Kotsu is advising customers to utilize the 'GO' taxi app for bookings or to find vehicles at nearby taxi stands. A specialized "labor taxi" service, designed for pregnant women nearing childbirth, has also been suspended in several major regions, including Tokyo, Yokohama, and Saitama.
The company has stated that the extent of the breach and the specific attack vector remain under investigation. While the immediate focus is on recovery and restoring services, Nihon Kotsu is also examining the possibility of data leakage. At present, no data exfiltration has been confirmed, but the company has pledged to provide updates as the investigation progresses.
To aid in the recovery and investigation process, Nihon Kotsu has engaged external cybersecurity experts. These specialists are working to assess the damage, secure the systems, and determine the full scope of the compromise. The company is also considering the potential for data loss and is preparing to notify affected parties if any sensitive information is found to have been compromised.
Customers and the public have been cautioned against engaging with any suspicious communications that appear to originate from Nihon Kotsu. The company advises users to avoid opening attachments or clicking on links in unsolicited emails or messages, as these could be part of ongoing phishing attempts or further malicious activity related to the incident.
As of the latest reports, no specific ransomware groups or cybercriminal organizations have claimed responsibility for the attack. The investigation is ongoing, with authorities and cybersecurity firms working to identify the perpetrators and understand the full implications of the breach. The incident highlights the ongoing threat landscape faced by large transportation and service providers.
Nihon Kotsu, with its significant market share and large workforce, represents a critical piece of Japan's transportation infrastructure. The disruption caused by this cyberattack underscores the vulnerability of even large, established organizations to sophisticated cyber threats and the importance of robust cybersecurity defenses.