Taxi Operator Nihon Kotsu to Shut Down Systems

Overview

Japan’s largest taxi operator, Nihon Kotsu, has confirmed a malware‑based cyberattack that forced the company to shut down parts of its infrastructure, including its taxi dispatch system. The incident, which occurred early Saturday morning, continues to disrupt operations across Tokyo and other major cities.

Impact on Operations

Nihon Kotsu, with 18,228 employees and a fleet of 8,558 taxis plus chauffeur vehicles, reported that:

• Taxi dispatch systems remain offline.
• Car hire and web booking services are unavailable.
• Telephone reservation management has been suspended.
• The “labor taxi” service for pregnant women is unavailable in Tokyo, Musashino, Mitaka, Tachikawa, Yokohama, and Saitama.

Customers are advised to use the GO taxi app or book directly at taxi stands until services are restored.

Company Response

Nihon Kotsu stated: “We have confirmed that our internal systems were subjected to unauthorized external access (malware infection). Immediately after detecting the unauthorized access, we implemented emergency measures, including disconnecting systems to prevent further damage.”

The company has:

• Engaged external cybersecurity experts to investigate and recover systems.
• Begun assessing the possibility of a data leak, though none has been confirmed yet.
• Warned customers to avoid suspicious emails or attachments claiming to be from the company.

Attribution and Motive

At the time of writing, no ransomware groups or extortion gangs have claimed responsibility. The attack appears to be part of a broader trend of critical infrastructure targeting, where transportation and logistics systems are increasingly exploited for disruption.

Defensive Lessons

This incident highlights the importance of:

• Rapid incident response — disconnecting systems to contain damage.
• Customer communication — providing clear alternatives like the GO app.
• Proactive monitoring — detecting unauthorized access early.
• Business continuity planning — ensuring critical services like medical transport have fallback options.

Expert in the Cloud Insight

The Nihon Kotsu breach underscores how transportation networks are now frontline targets in cyber warfare. With dispatch systems, booking platforms, and specialized services disrupted, the ripple effects extend beyond convenience to public safety and healthcare access.

For organizations, the lesson is clear: cyber resilience must be treated as core infrastructure, not an afterthought.