Washington Hotel in Japan Falls Victim to Ransomware Attack

The Washington Hotel in Japan Faces Ransomware Attack

The Washington Hotel brand in Japan recently disclosed that it fell victim to a ransomware attack, leading to the compromise of its servers and exposure of critical business data.

In response to the security breach, the hospitality group, operating under Fujita Kanko Inc. (WHG Hotels), has mobilized an internal task force and enlisted the expertise of external cybersecurity professionals to evaluate the extent of the intrusion, ascertain the potential compromise of customer data, and coordinate recovery efforts.

With 30 locations across Japan, Washington Hotel, known for its business-focused hospitality services, is a prominent player in the industry, boasting 11,000 rooms spread across its properties and welcoming nearly 5 million guests annually.

The breach was initiated on Friday, February 13, 2026, at 22:00 local time, prompting immediate action from the IT team to disconnect servers from the internet and contain the attack’s propagation within the network.

Collaboration with law enforcement agencies and cybersecurity experts was swiftly initiated to navigate the aftermath of the breach.

While investigations are ongoing, Washington Hotel has confirmed unauthorized access to various business data stored on the affected servers.

Fortunately, customer data appears to be secure as it is stored on servers managed by a third-party entity with no reported unauthorized access.

Despite operational disruptions, including the temporary unavailability of credit card terminals at some Washington Hotel properties, the impact on overall operations remains minimal.

The financial repercussions of the incident are currently under assessment, with Washington Hotel committing to provide updates as new information emerges.

Notably, no ransomware groups have asserted responsibility for the attack on Washington Hotel through known dark-web extortion channels monitored by BleepingComputer.

Recent cyberattacks targeting various companies in Japan, such as Nissan, Muji, Asahi, and NTT, underscore the escalating threat landscape faced by organizations.

While unrelated to the Washington Hotel incident, JPCERT/CC disclosed the exploitation of an arbitrary command injection vulnerability (CVE-2026-25108) in Soliton Systems’ FileZen products, a widely used file-sharing appliance in Japan that was also targeted in 2021.

Modern IT infrastructure outpaces manual workflows. Learn how to reduce delays, enhance reliability with automated responses, and scale intelligent workflows using existing tools in this comprehensive Tines guide.

Get the guide