Nihon Kotsu, Japan’s largest taxi and chauffeur service provider, has suspended key digital operations following a confirmed malware infection discovered over the weekend. The company, which operates over 8,500 taxis, is currently working with external cybersecurity experts to investigate the breach and determine whether customer data was compromised.
Impact on Taxi Dispatch and Booking Services
The cyberattack, detected early Saturday morning, forced Nihon Kotsu to take significant portions of its infrastructure offline to contain the unauthorized access. According to the company’s official statement, the incident has disrupted several core services, including:
- Telephone Dispatch: The company’s primary taxi booking line remains unavailable.
- Web Reservations: Online booking portals and reservation management systems are currently offline.
- Specialized Services: The "labor taxi" service—a dedicated transport option for pregnant women in Tokyo, Yokohama, Saitama, and surrounding areas—is temporarily suspended.
Nihon Kotsu has directed customers to utilize the third-party "GO" taxi application or visit physical taxi stands to secure transportation while internal systems undergo recovery.
Investigation and Data Security Status
As of this report, the company has not confirmed any unauthorized exfiltration of sensitive customer data. Nihon Kotsu stated that it is working with external cybersecurity specialists to analyze the scope of the infection and restore functionality to its internal networks.
The firm has cautioned its user base to remain vigilant against phishing attempts. Specifically, the company advised customers to avoid clicking links or opening attachments in any suspicious communications that claim to originate from Nihon Kotsu, as these may be attempts to leverage the ongoing service disruption.
Understanding the Cyber Risk to Transportation Infrastructure
The attack on Nihon Kotsu highlights the growing vulnerability of large-scale logistics and transport operators to ransomware and malware campaigns. While no extortion group has claimed responsibility for this specific intrusion, such incidents often involve attackers seeking to disrupt operational technology (OT) to force a ransom payment.
For passengers, the immediate impact is a loss of convenience and a reliance on decentralized booking methods. For the organization, the priority remains the restoration of its dispatch network and the verification of its data integrity. The company has committed to providing updates through its official channels as the investigation progresses.
Frequently Asked Questions
Is my data safe?
Nihon Kotsu has not confirmed a data leak. Investigations are ongoing, and the company has promised to notify users if any personal information is found to have been accessed.
How can I book a ride?
The company recommends using the "GO" taxi app or proceeding to a local taxi stand. Telephone dispatch and web-based booking systems are currently unavailable.
Should I respond to emails from Nihon Kotsu?
No. The company has explicitly warned customers to ignore suspicious emails, links, or attachments claiming to be from them during this recovery period.
Keep reading