Drooid Logo
Back to story perspectives

Full Breakdown

Asahi Faces Major Cyber-Attack, Potential Data Breach of 1.5 Million Customers

11/27/2025, 10:58:06 AM

Overview of the Cyber-Attack

In September 2023, Japanese beer giant Asahi suffered a significant ransomware attack that disrupted operations across its factories in Japan. The attack, attributed to the ransomware group Qilin, led to the potential exposure of personal information belonging to over 1.5 million customers. Asahi's investigation revealed that the attackers infiltrated its network, encrypted data, and deployed ransomware, forcing employees to revert to manual order-taking methods.

Data Exposure Details

Asahi reported that the personal details of individuals who had contacted its customer service centers were likely compromised. This includes names, gender, addresses, and contact information of more than 1.52 million customers. Additionally, data belonging to approximately 107,000 current and former employees, along with 168,000 family members of staff, was also at risk. The company confirmed that 114,000 external contacts who had communicated with Asahi were potentially affected. However, Asahi clarified that credit card information was not part of the leaked data.

Response and Recovery Efforts

In response to the attack, Asahi has been focused on containing the breach and restoring its systems. The company spent nearly two months addressing the fallout from the incident and is currently working to reconfigure its network. Asahi has also announced a delay in releasing its full-year financial results to prioritize recovery efforts.

Impact on Operations

The cyber-attack has had tangible effects on Asahi's operations, with retailers in Japan warning of potential shortages of beer and other drinks as the company grapples with the aftermath of the incident. Asahi has stated that the impact of the attack is limited to its operations in Japan, and its European brands, including Peroni and Fuller's Brewery, have not been affected.

Criticism & Opposition

While Asahi has taken steps to address the situation, there is concern regarding the adequacy of its cybersecurity measures. Critics argue that the breach highlights vulnerabilities within the company's data protection protocols, raising questions about its preparedness against such attacks.

Official Statements & Responses

Asahi has communicated its commitment to notifying those affected by the data breach and has emphasized that it has not confirmed any evidence of the data being released publicly. The company is focused on restoring operations while ensuring the security of its systems moving forward.

What's Next

Asahi continues to work on restoring its systems and enhancing its cybersecurity measures to prevent future incidents. The company is expected to provide updates on its recovery progress and any further findings related to the data breach in the coming weeks.