Asahi Group Faces Major Disruption from Ransomware Attack

In late September 2025, Asahi Group Holdings, Japan's largest brewer, experienced a significant ransomware attack attributed to the Russia-based hacker group Qilin. This cyber incident forced the company to halt production at most of its 30 factories across Japan, severely disrupting operations and supply chains. The attack compromised critical internal systems, including order processing and accounting, leading to a reliance on manual methods such as pen, paper, and fax machines for order fulfillment.

Asahi Ransomware Breach Potentially Exposes Personal Data

The ransomware attack has drastically reduced Asahi's shipment capacity to between 10% and 20% of normal levels, resulting in shortages of popular products like Super Dry beer. Retailers, including 7-Eleven, FamilyMart, and Lawson, have reported dwindling stocks, affecting not only beer but also Asahi's soft drinks and bottled teas. Small businesses, such as Tokyo's Ben Thai restaurant, are struggling with limited supplies. The disruption is expected to persist for weeks, raising concerns among vendors and customers about the availability of Asahi products.

Beer deliveries falter after Asahi cyber crisis

Asahi has initiated an investigation to determine the extent of the data breach, with indications that personal information may have been compromised. The company has established an Emergency Response Headquarters and is collaborating with cybersecurity experts to expedite system recovery. Asahi has committed to notifying affected individuals promptly if unauthorized data transfer is confirmed, adhering to applicable laws on personal information protection. However, specific details regarding the type of data potentially stolen remain undisclosed.

Asahi Ransomware Breach Potentially Exposes Personal Data

The attack on Asahi highlights a growing trend of cyber vulnerabilities among major corporations in Japan, exacerbated by outdated legacy systems and insufficient cybersecurity measures. The National Police Agency reported a record number of ransomware incidents in the first half of 2025, indicating a pressing need for businesses to prioritize cybersecurity. The Japanese government has enacted an Active Cyber Defense Law aimed at enhancing protections and encouraging proactive measures against cyber threats.

Asahi Cyberattack is the Problem of Every Business

Chief Cabinet Secretary Yoshimasa Hayashi confirmed that an investigation into the Asahi breach is ongoing. Asahi has expressed regret over the disruption caused to customers and partners, emphasizing its commitment to restoring operations and safeguarding personal data. The company has also delayed the release of its third-quarter financial results due to the operational challenges stemming from the attack.

Asahi Ransomware Breach Potentially Exposes Personal Data

Experts have criticized the reliance on outdated systems within Japanese corporations, suggesting that this incident serves as a wake-up call for businesses to enhance their cybersecurity protocols. The attack has raised concerns about the preparedness of companies to handle sophisticated cyber threats, particularly in an environment that traditionally emphasizes high trust.

Asahi Cyberattack is the Problem of Every Business

• “As we continue investigating the extent and details of the impact, focusing on the systems targeted in the recent attack, we have identified the possibility that personal information may have been subject to unauthorised data transfer,” — Asahi Group Holdings

BBC News

• “The group’s successful disruption of Asahi highlights the growing vulnerability of industrial operations to sophisticated digital threats.” — Cybersecurity Expert

Personal data possibly stolen in recent Asahi cyberattack

Asahi Group's ongoing recovery efforts and the implications of this cyberattack underscore the critical need for robust cybersecurity measures in today's digital landscape.

Asahi Ransomware Breach Potentially Exposes Personal Data