Article Details
Hacker group claims responsibility for Asahi Group ransomware attack
Published on October 8, 2025
Photo shows a page on the dark web where ransomware group Qilin claimed responsibility for a cyberattack on Asahi Group Holdings Ltd.
A hacker group has claimed responsibility for last week's cyberattack on Japanese beverage giant Asahi Group Holdings Ltd, saying it has stolen employee information and internal documents, a cybersecurity source said Wednesday.
Qilin, a ransomware group believed to be based in Russia, claimed in a post on the dark web that it has stolen around 9,300 files, or about 27 gigabytes of data, according to the source.
Asahi Group said it is conducting an investigation and declined to provide details, including whether it is in contact with the hackers.
The beverage maker reported a ransomware cyberattack on Sept. 29, which caused a system failure that forced the company to halt production at many of its domestic factories and postpone the release of some products.
The cyberattack used ransomware, a type of malicious software that encrypts data and renders it inaccessible until a ransom is paid. Qilin has carried out ransomware attacks worldwide since 2022, according to several cybersecurity sources.
Yukimi Sota, of the Japanese subsidiary of U.S. cybersecurity firm Proofpoint, said hacker groups often take a two-pronged approach to force their target to pay a ransom.
"The hackers were probably unable to extort ransom money through direct negotiations with Asahi, so they are trying to apply further pressure by releasing the documents," Sota said.
Asahi Group said Monday it has restarted operations at its domestic beer factories.
As of Wednesday, however, it remains uncertain when its systems will be restored to full function as shipments of beer and other products continue to be disrupted.
© KYODO