Japan’s most popular beer, Asahi Super Dry, could run out this weekend after a massive ransomware attack crippled production at nearly all of Asahi Group Holdings Ltd.’s factories.
Asahi, the nation’s largest brewer and one of the biggest beverage companies in the world, was forced to halt operations at almost all 30 of its domestic factories last week. The attack shut down the company’s ordering and delivery systems, leaving retailers scrambling to explain shortages to customers.
In a Friday statement, Asahi confirmed the incident was a ransomware attack but withheld further details to prevent “further damage.” The company said hackers may have transferred some customer and business partner data, though the scope remains under investigation. Asahi has isolated affected systems and brought in cybersecurity experts to contain the threat.
Ransomware typically locks victims out of their data until a ransom—usually in cryptocurrency—is paid. Analysts say Japanese corporations are particularly vulnerable due to weak cybersecurity practices and a tendency to quietly pay ransoms to avoid reputational damage.
For now, Asahi’s email and online ordering remain offline. The company is resorting to paper and phone-based ordering and hopes to roll out a new phone ordering system next week. Eight new product launches, including fruit sodas and protein bars, have been postponed.
Supermarkets and convenience stores across Japan began warning customers this week that supplies of Asahi products—including beer and soft drinks—would be limited or temporarily unavailable. Online sales have also been suspended.
The disruption comes at a critical time for Asahi, which generates about half its revenue from international sales of brands like Italy’s Peroni. The company stressed that the system disruption is currently limited to Japan.
Shares of Asahi dropped 7 percent this week as the scale of the cyberattack became clear. Rival brewers Kirin and Sapporo saw modest stock gains but have not yet experienced a major shift in market share.
