What happened — a ransomware strike hits Asahi
Japanese brewing and beverages giant Asahi Group revealed on 26 November 2025 that a ransomware attack on 29 September may have exposed the personal data of about 1.52 million customers.
The attack disrupted order processing, shipping, and call-centre operations for Asahi’s domestic business — forcing a temporary halt to much of its distribution network.
What data might be exposed
According to Asahi, leaked information may include customer names, contact information and possibly addresses.
Besides customers, data belonging to external contacts and current or former employees — as well as their families — may also have been compromised.
So far, Asahi says it has not seen any evidence that the data has been publicly posted.
Who claimed responsibility — and the fallout
A hacking group calling itself Qilin claimed responsibility for the breach, stating they exfiltrated files from Asahi’s internal network.
In the immediate aftermath, Asahi postponed the release of its third-quarter earnings (originally scheduled for November 12) by more than 50 days.
The disruption led to shortages of beverages — including its flagship “Super Dry” beer — at restaurants, retailers, and bars across Japan.
What Asahi says it’s doing — and what customers need to watch
Asahi has engaged external cybersecurity specialists to investigate the scope of the breach and is working to restore its logistical operations — aiming for a return to normal by February 2026, though some product shortages may linger longer.
The company said it will notify affected customers directly if it confirms unauthorized data transfer.
Customers and contacts affected by the breach are being advised to monitor their accounts for any suspicious activity — including phishing attempts, unsolicited contact or identity theft — since the leaked data could be used for targeting.
Why it matters — wider implications for cyber-security
The incident underlines how even major, high-profile companies remain vulnerable to ransomware and data breaches. A disruption at Asahi rippled through supply chains and public life in Japan — affecting not just the business, but millions of consumers accustomed to its products.
It also raises concerns about how well businesses secure customer data, and how transparent — and fast — they are in notifying individuals when breaches occur. For Asahi, the reputational and financial cost could be significant, beyond immediate logistics disruption.
