Asahi Group, Japan's largest brewer, has revealed that personal data may have been compromised in a significant ransomware attack that disrupted operations at its factories across the country. The assault forced the company to cease production at most of its 30 facilities after it affected everything from beer shipments to accounting systems.
All of Asahi's factories have since partially reopened. However, the company is currently relying on traditional methods such as pen, paper, and fax machines for order processing, as its computer systems remain down.
In a recent statement, Asahi confirmed it is investigating the possibility of unauthorized data transfers occurring during the cyber-attack. The company established its Emergency Response Headquarters and is collaborating with cybersecurity experts to restore systems swiftly while contacting those potentially affected.
Asahi noted, As we continue investigating the extent and details of the impact, we have identified the possibility that personal information may have been subject to unauthorized data transfer. They pledged to promptly notify affected individuals and take appropriate actions based on applicable laws governing personal data protection.
While the specifics of the stolen personal information remain unclear, Asahi has not disclosed further details as investigations are ongoing. The cyber-attack impacted only the company's operations in Japan, which represent approximately half of its sales, though Asahi Group also owns international brands like Peroni and Grolsch.
Asahi has expressed its apologies for the disruptions caused by this incident and will delay the disclosure of its third-quarter financial results due to the ongoing system restoration efforts.
The Russian-based ransomware group Qilin has claimed responsibility for this attack, which is part of a troubling trend impacting major organizations, including recent breaches involving other notable companies in the UK and around the world.
Experts have indicated a record rise in significant cyber-attacks, with national cybersecurity authorities advising businesses to take decisive actions to enhance their security posture.