System Exe: ransomware leaked partner personal data and login details, including about 14,000 member records entrusted by Tokyu Community

1. 2025-06-20

   In the early morning it confirmed unauthorized access by an outside party. It set up a response team and began an investigation with outside experts. [1]

2. 2025-07-01

   It reported to the Tokyo Metropolitan Government Bureau of Port and Harbor, for which it maintains the Chofu Airport reception system. [2]

3. 2025-07-03

   The bureau announced it. The attack was ransomware on the company's internal servers, with no unauthorized access to the bureau's servers and no data leak found. The bureau ordered the network cut off until the investigation ended. [2] [4]

4. 2025-07-04

   Tokyu Community announced a leak of member data it had handed over for system development and suspended new registrations and logins on services at risk of impersonation. [3]

5. 2025-08-22

   It published its final investigation report. The cause was unauthorized access through an abused communication device. [1]

The name, date of birth, gender, address, phone number, email address, login ID and password of some partners leaked. [1]

Tokyu Community said the leak included about 14,000 WELBOX member records of "Kazokuryoku Plus" subscribers as of October 2019 (name, address, contact details and more), and the names of managed properties and their managers. [3]