Asahi says more than 1.5 million customers' data potentially leaked in cyber-attack

Asahi cyber-attack overview

Japanese beer producer Asahi reported that a large-scale cyber-attack in late September disrupted its operations in Japan and led to a suspected leak of personal data belonging to more than 1.5 million customers. The company stated that the incident involved ransomware that encrypted parts of its internal systems and temporarily affected ordering, shipping and customer service functions.

Nature of the breach

According to Asahi, the attackers gained access to servers and company-issued computers, where both operational data and personal information were stored. The firm indicated that while the intrusion was contained, some data on compromised devices and servers may have been copied before systems were secured.

Potentially exposed customer data

Asahi said the incident may have exposed the personal information of about 1.5 million people who had contacted its customer service centres. The potentially affected records include names, gender, postal addresses, phone numbers and email addresses associated with inquiries about Asahi Breweries, Asahi Soft Drinks and Asahi Group Foods products.

Impact on employees and related parties

In addition to customers, information on current and former employees and their families may also have been involved in the breach. Data linked to external business contacts, including people who had interacted with the company or received formal communications from Asahi, were likewise identified among the at-risk records.

Scope and limits of the leak

Asahi emphasized that credit card details were not included in the compromised datasets, and there was no confirmation at the time that the stolen information had been publicly posted. The company said the impact of the incident was limited to systems managed in Japan, and production at its Japanese factories resumed after initial disruption.

Company response and ongoing actions

The group launched an internal investigation to determine the full scale of the intrusion and strengthen its cybersecurity controls to prevent similar attacks. Asahi also delayed some financial disclosures in order to prioritise recovery work and notification of individuals whose data may have been affected.

“The personal information of more than 1.5 million customers, as well as employees, family members and external contacts, is considered at risk of potential leakage, although credit card data has not been compromised.”

Author’s summary

A major ransomware incident hit Asahi’s Japan operations, likely exposing personal details of over 1.5 million customers and related parties while sparing payment data, prompting system recovery, notifications and stronger security measures.

BBC — 2025-11-27