Asahi ransomware: most of its 30 Japanese plants halted

2025-09-29 · Publisher : Asahi Group · Domain : Industry 4.0 & 5.0

In late September 2025 (≈ 29 September), a ransomware attack hit the ordering and delivery systems of Asahi, Japan's largest brewer, which suspended production at most of its 30 Japanese plants. The Qilin group claimed the attack.

What changes

Approximate date: late September 2025 (≈ 29 September).
Ordering, delivery and accounting systems hit; production suspended at most of the 30 Japanese plants.
On 14 October Asahi said personal data may have been stolen.
Claimed by the Qilin ransomware group, Russia-based according to the BBC.
Quarterly results publication postponed.

### Background In late September 2025 (approximate date: **≈ 29 September**), brewer Asahi, Japan's number one in beer, suffered a **ransomware** attack hitting its ordering and delivery systems. Unable to take orders or ship, the group suspended production at **most of its 30** Japanese plants. ### Key features - Disruption across the chain, from beer shipments to the accounting system, according to the BBC (14 October 2025). - Asahi said **personal data** may have been stolen. - The **Qilin** ransomware group, described by the BBC as Russia-based, claimed the attack. - Third-quarter results publication was postponed, depending on system restoration. ### Why it matters As at Jaguar Land Rover at the same time, production lines were not necessarily attacked directly: losing business systems (orders, logistics, invoicing) is what stops the plants. Food and beverage, with just-in-time flows and perishable products, is especially exposed. For industrial managers, it confirms the value of degraded-mode operating procedures and a clear map of dependencies between business IT and production. ### Key takeaway Two industrial giants stopped within a month by cyberattacks: plants' dependence on business systems has become a major risk.

Asahi ransomware: most of its 30 Japanese plants halted

What changes

Links