Asahi Reports Cyberattack Potentially Compromised Data of 1.5 Million Customers

Asahi, a prominent Japanese brewery, has revealed that a cyberattack may have compromised the personal information of up to 1.5 million individuals. The security breach occurred on September 29 when ransomware infiltrated Asahi’s systems, resulting in the encryption of numerous servers and employee computers.

Initial investigations indicated that the attackers gained access through equipment located on-site, which allowed them to infiltrate the data center network before executing their malicious plan. Asahi confirmed that the breach included data related to individuals who had contacted their customer support teams, and the company is in the process of notifying those affected.

Details of the Cyberattack

Although Asahi has assured stakeholders that the breach is limited to systems managed in Japan, the fallout impacts an extensive number of people. Approximately 1, 525, 000 customers who interacted with Asahi Breweries, Asahi Soft Drinks, or Asahi Group Foods are affected, along with 107, 000 employees and retirees, 168, 000 family members of staff, and 114, 000 external contacts.

Asahi being poured into a glass — Asahi Super Dry (YouTube)

Importantly, the company clarified that no credit card information was compromised, and so far, there is no evidence that the stolen data has appeared online.

Atsushi Katsuki, president and Group CEO of Asahi, publicly addressed the situation, expressing, “I would like to sincerely apologize for any difficulties caused to our stakeholders by the recent system disruption… We are making every effort to achieve full system restoration as quickly as possible, while implementing measures to prevent recurrence and strengthening information security across the Group.”

In response to the attack, the brewery is implementing a comprehensive set of long-term security measures. These include reconfigured network routes, stricter external access protocols, enhanced threat detection systems, updated backup procedures, and increased training for employees on cybersecurity.

Source & Images