In a stark reminder of the growing threat of cybercrime to global supply chains, Japan’s largest beverage producer, Asahi Group Holdings, has been hit by a devastating ransomware attack that disrupted operations across the country. The cyberattack, which began on September 29, 2025, forced the company to suspend order processing, shipments, and customer service functions—triggering widespread shortages of beer, soft drinks, and bottled teas.
What Happened?
The ransomware attack targeted Asahi’s internal servers, causing a system-wide outage that halted production and distribution at over 30 domestic facilities. The company confirmed that the Qilin ransomware group claimed responsibility, alleging the theft of 27 GB of sensitive data, including financial records and employee information.
Impact on Consumers and Retailers
- Beer Shortage: Asahi’s flagship product, Super Dry beer, became scarce in restaurants and bars. Some eateries resorted to serving rival brands like Sapporo to meet demand.
- Convenience Store Disruption: Chains like Lawson, FamilyMart, and 7-Eleven reported empty shelves and suspended shipments of Asahi’s private-label beverages.
- Manual Order Processing: In a bid to resume operations, Asahi began taking handwritten orders and manually shipping select products, prioritizing food and soft drinks over alcoholic beverages.
Security and Recovery Efforts
Asahi has launched an emergency task force and is working with cybersecurity experts to restore its systems. While some breweries have resumed limited production, full recovery remains uncertain. The company has isolated affected systems to prevent further data breaches and is investigating the scope of the leak.
Financial Fallout
The cyberattack has already impacted Asahi’s stock, which fell over 7% following the announcement. Analysts warn that prolonged disruptions could affect quarterly earnings and damage consumer trust.
Broader Implications
This incident underscores the vulnerability of critical infrastructure to ransomware attacks. Asahi joins a growing list of global companies—including Jaguar Land Rover and Marks & Spencer—that have faced operational paralysis due to cyber threats.
