Asahi says more than 1.5m customers’ data leaked in cyber-attack

Japanese beer giant Asahi revealed on Thursday that the personal information of more than 1.5 million customers was potentially leaked due to a major cyberattack in September.

The beverage company published a statement on its investigation into the ransomware attack that disrupted its operations at its factories in Japan and forced employees to take orders via pen and paper.

Asahi said it found that people who contacted its customer service centers likely had their personal details exposed and that those affected would be notified soon.

The firm said it would delay releasing its full-year financial results to focus on dealing with the fallout from the attack.

Asahi did not reveal the identity of the attacker or his demands. Ransomware group Killin – which has previously hacked other major companies – claimed responsibility for the Asahi attack.

In its preliminary findings, the beer maker said it discovered a glitch in one of its data centers on September 29.

It said that although the system was immediately isolated, investigators found that the attacker had already infiltrated the network, encrypted its data and deployed ransomware – a virus that blocks access to files until a ransom is paid.

Some data on the affected computers was also exposed, along with personal information stored in the hacked servers, Asahi said.

It contains personal details of 1.52 million customers, particularly their names, gender, addresses and contact information.

Data on approximately 107,000 current and former employees and 168,000 family members of employees was also potentially leaked.

The names and contact details of 114,000 external contacts who communicated with the firm were also linked.

Asahi’s list of leaked data did not include credit card details.

The company said it had not confirmed any evidence of the data released and that the impact of the attack was limited to systems managed in Japan.

The firm also owns big brands like Peroni in Europe and Fuller Brewery in the UK. Asahi has said that the cyber attack has not affected the operations of those companies.

The company said it spent about two months containing the attack and is now working to restore systems and reconfigure its network.

This cut resulted in a shortage of the drink in stores across Japan. Asahi has about 40% share in the country’s beer market.

The shortage also affected Asahi’s soft drinks, such as ginger beer and soda water.

Shipments are also gradually resuming, said company President and Chief Executive Atsushi Katsuki, who apologized for the difficulties caused by the disruption.

“We are making every effort to achieve full system restoration as quickly as possible, while implementing measures to prevent recurrence and strengthen information security across the group.”

Other global brands have also experienced similar cyberattacks recently.

Jaguar Land Rover was forced to use emergency funding after a major cyber attack disrupted operations at British factories.