Asahi admits personal data may have been slurped in breach

"The attack first bubbled up on September 29, when Asahi said a "system failure caused by a cyberattack" had forced it to shut down ordering, shipping, and call center systems across Japan. At the time, the brewer was adamant that customer and employee data were safe. Days later, that confidence began to fizz out, with the company admitting that ransomware was to blame and that "traces" suggested a potential unauthorized transfer of data."

"The attack was claimed by the Qilin ransomware crew, which has boasted of stealing around 27 GB of files, including contracts, forecasts, employee records, and financial data. Samples of the allegedly stolen data, seen by The Register, suggest Asahi's fears of personal data theft are well-founded, with Qilin posting what appear to be employee ID cards and other personal documents."

Asahi identified the possibility that personal information may have been subject to unauthorized data transfer during a cyberattack that began on September 29. The incident forced shutdowns of ordering, shipping, and call center systems across Japan and was later attributed to ransomware. The Qilin ransomware group claimed roughly 27 GB of files stolen, reportedly including contracts, forecasts, employee records, and financial data, and posted apparent employee ID cards. Domestic logistics remain disrupted with delayed shipments and potential stock shortages, orders processed manually, and a postponed quarterly financial results announcement while investigations continue.

Read at Theregister