Ransomware group Qilin claims responsibility for cyber attack on Asahi Group Holdings

It has been revealed that the Russia-based cybercrime group '

https://www.comparitech.com/news/ransomware-gang-qilin-says-it-hacked-asahi-group-stole-data/

Qilin Ransomware Gang Claims Asahi Cyber-Attack - Infosecurity Magazine
https://www.infosecurity-magazine.com/news/qilin-ransomware-asahi-cyber-attack/

The cyber attack on Asahi Group Holdings disrupted order and shipping operations and call center operations at domestic group companies, forcing the suspension of operations at most of the company's domestic factories.

Asahi Breweries shuts down its factories after a cyber attack, with reports that Asahi Super Dry stocks are expected to run out within days - GIGAZINE

Asahi Group Holdings is still investigating the scope of the breach and has not disclosed what the compromised data included.

However, on October 7, a Russian-based cybercrime group called Qilin listed Asahi Group Holdings on a data leak website, claiming to have stolen 27GB of files from the company. Qilin claims the stolen data includes 'financial documents, budgets and contracts, employee personal information, company plans and development forecasts.'

Below is a screenshot of the Asahi Group Holdings page on the data leak site.

According to technology media outlet Comparitech, Qilin has been responsible for at least 105 confirmed ransomware attacks since the start of 2025, with the total number of attacks not officially acknowledged by the targeted organizations reaching 473. Japanese companies have also been targeted, with attacks on plastics manufacturer Shinko Plastics in June 2025, Nissan Motor subsidiary Creative Box Co., Ltd. , and medical supplies manufacturer Osaki Medical in August 2025.

In June 2024, Qilin launched a massive ransomware attack on Synnovis, a London-based healthcare provider, demanding a $50 million ransom. Qilin representatives apologized to those affected by the ransomware attack, but justified the attack as 'retaliation for the British government's involvement in an unspecified war.'

Hackers demand $50 million in ransomware attack on London's health service - GIGAZINE

As a result, Synnovis did not comply with the ransom demand, and Qilin released approximately 400GB of data, including patient information, on the dark web.

Ransomware group 'Qilin' releases approximately 400GB of confidential information about hospital patients, and the affected NHS refuses to pay the ransom of 8 billion yen - GIGAZINE

Asahi Breweries has announced that due to the cyberattack, it will postpone the release of new products that were scheduled for October. Production at six factories nationwide resumed on October 2nd, and shipments of ' Super Dry ' have already partially resumed. From October 15th, shipments of ' Asahi Draft Beer ,' ' Style Free ,' ' Clear Asahi ,' ' Dry Zero ,' and ' Black Nikka Clear ' will partially resume.

Asahi Breweries announces operation of all six breweries, partial resumption of shipments, and postponement of new product launches
https://www.asahibeer.co.jp/news/2025/1006.html