Japan’s largest brewery is reeling after an Asahi Cyberattack linked to the ransomware gang Qilin, exposing sensitive data affecting more than 1.5 million individuals.

The company confirmed that the Qilin group has added Asahi to its dark-web leak site, despite Asahi’s initial announcement that no group had yet claimed responsibility.

A Devastating Attack on Japan’s Largest Brewer

Japanese beer maker Asahi Group Holdings announced that its domestic operations were crippled after a September ransomware intrusion forced distribution centers, customer service systems, and portions of factory operations offline. International operations remain unaffected.

In its public statement, Asahi said it detected the intrusion on September 29 when attackers “accessed the network through equipment located at our Group’s site.”
The company explained:

“There is a possibility that personal information stored on servers in the data center may have been exposed. We have not confirmed any instance of this data being published on the internet.”

Asahi’s full notice can be viewed on its website:
🔗 Asahi Official Cyberattack Announcement

Qilin Steps Forward: A Notorious Ransomware Threat

Although Asahi initially said no group had claimed responsibility, the ransomware organization Qilin posted Asahi to its dark-web leak portal.

Comet 31/ATLAS and ESA: New Observations Reveal Interstellar Visitor’s Precise Trajectory - USA Herald

Qilin’s history includes collaboration with North Korean–linked actors, known as Moonstone Sleet, and high-profile attacks across Asia.

Cybersecurity analysts note that Qilin has been increasingly active, including breaches such as:
🔗 Qilin Ransomware Turns MSP Breach Into Korean Leaks Data Heist

The BBC also reported that Qilin claimed responsibility and listed Asahi’s stolen files online.
 

Scale of the Compromise: Over 1.5 Million Records Exposed

Asahi confirmed that the attackers accessed servers and PCs containing data from more than 1,525,000 customers, including:

• Names
• Mailing addresses
• Phone numbers
• Email addresses
• Gender data

Another 300,000 employees, family members, and business contacts may have had additional data accessed.

Asahi emphasized that, so far, “there is no evidence of the data being misused online.”

More reporting:
🔗 Asahi Stops Production After Cyberattack – TechRadar

Ransomware’s Expanding Impact in Japan

The Asahi Cyberattack highlights a troubling trend: major Japanese brands, including Nissan Creative Box and global tech firms like IGT, are among a growing list of victims. Recent cyberattacks have cost international corporations millions, exposing vulnerabilities across the global supply chain.

A related video provides additional context:
🔗 Asahi Says Data of 1.5 Million Customers Potentially Leaked