Asahi Group Restarts Production After Cyberattack Disruption

Asahi Group Holdings, Japan's largest brewer, faced significant operational disruptions following a ransomware cyberattack that began on September 29, 2025. The attack paralyzed the company's ordering and delivery systems, leading to a temporary halt in production across its six breweries in Japan, which account for approximately half of its global sales. The incident forced Asahi to suspend critical functions, including order processing and shipping, resulting in widespread shortages of its flagship product, Asahi Super Dry, at retailers such as 7-Eleven and FamilyMart.

Asahi Resumes Production After Ransomware Attack Disrupted Japan Operations and Exposed DataBeer brand Asahi restarts production following cyberattackAsahi restarts beer production after cyber-attack disrupts Japanese breweriesAsahi restarts brewing at its domestic breweriesReutersBBC NewsAsahi Struggles After Massive Cyberattack, Beer Production Grinds to Halt

Asahi announced on October 2 that it had partially restarted production at all six of its breweries. However, operations remain below full capacity, with the company relying on manual order processing methods, including phone orders and fax communications, due to ongoing system outages. Asahi has resumed shipments of Super Dry and plans to restart deliveries of over a dozen additional products, including Asahi Dry Zero and Black Nikka Clear whisky, by October 15.

BBC News

The cyberattack has had a ripple effect on Japan's retail and food service sectors. Many restaurants and bars reported dwindling supplies, with some establishments, like the Marugen ramen chain, considering switching to rival brands due to the shortage. Analysts estimate that if the disruptions continue throughout October, Asahi's domestic operating profit could decline by as much as 83%. Retailers have begun sourcing alternative products to mitigate the impact of Asahi's supply issues.

Asahi Struggles After Massive Cyberattack, Beer Production Grinds to Halt

Asahi's CEO, Atsushi Katsuki, expressed regret over the disruptions, stating, "We deeply regret the inconvenience caused to our customers and partners." The company is actively investigating the cyberattack's scope and has engaged external cybersecurity experts to assist in recovery efforts. Asahi has confirmed that while its production systems were not directly compromised, the inability to process orders necessitated the temporary shutdown.

Beer brand Asahi restarts production following cyberattack

Critics have raised concerns regarding Asahi's preparedness for such cyber incidents. Nobuo Miwa, a representative from security firm S&J Corp, noted, "The fact that a big company like this is taking so long to recover shows their preparation was inadequate." Cybersecurity experts have warned that Japanese companies are increasingly attractive targets for ransomware attacks due to perceived vulnerabilities in their defenses.

The Independent

While Asahi has made strides in restoring operations, the timeline for full recovery remains uncertain. Experts suggest that complete restoration could take several months. The company continues to assess the financial impact of the attack on its fiscal year ending December 2025. Asahi's international operations, including its ownership of Fuller’s in the UK and brands like Peroni and Pilsner Urquell, have not been affected by the incident.

Asahi restarts beer production after cyber-attack disrupts Japanese breweries

The cyberattack on Asahi Group Holdings underscores the growing threat of cybersecurity breaches in the manufacturing sector. As the company works to stabilize its supply chain and restore normal operations, the incident serves as a reminder of the vulnerabilities faced by major corporations in an increasingly digital landscape.

Asahi Resumes Production After Ransomware Attack Disrupted Japan Operations and Exposed Data