Concise Cybersecurity Intelligence for Decision-Makers
In late September 2025, Asahi Group Holdings, Japan’s largest brewer, disclosed a major cyber incident that disrupted domestic operations. The attack forced the company to suspend digital ordering, shipment and customer service systems across its Japanese business units, including many of its 30 breweries.
Although the company reported no confirmed leak of personal customer data, it acknowledged that systems were compromised and stopped functioning. This triggered a switch to manual processing and raising the prospect of product-shortages across Japan.
The attack has been attributed to the ransomware-group Qilin which claimed to have stolen approximately 27 GB of data and around 9,300 files from Asahi.
The incident underscores the acute vulnerability of supply-chain-centric and manufacturing organisations to ransomware campaigns. Ransomware attacks can not only lock systems but cripple logistics and delivery operations. For cyber risk leaders and incident-response teams, this event underscores the need to integrate IT/OT resilience. It also highlights the importance of robust backup strategies, rapid incident response plans and clear communication protocols.
For a comprehensive breakdown of the attack timeline, technical indicators (IOCs), and lessons learned, download our full document now and stay one step ahead of the next threat.
Disclaimer: This document has been created with the sole purpose of encouraging discourse on the subject of cybersecurity and good security practices. Our intention is not to defame any company, person or legal entity. Every piece of information mentioned herein is based on reports and data freely available online. Cyber Management Alliance neither takes credit nor any responsibility for the accuracy of any source or information shared herein.
We offer a host of courses including our NCSC Assured Training in Cyber Incident Planning and Response and our NCSC Assured Training in Building and Optimising Incident Response Playbooks.
Hands On, full-support 'Security As a Service', specifically designed for organisations that require access to experienced cybersecurity, governance, risk and compliance professionals.
A unique, affordable, subscription-based, cybersecurity service for small to medium businesses, offering 280+ services in cybersecurity.
Scenario-based, verbally-simulated tabletop attack exercises that test your organisation's ability to effectively respond to a cyber-attack.