Personal data may have been stolen in the ransomware attack that forced Asahi to halt beer production, the company has said.


Japan's biggest brewer was forced to pause operations at most of its 30 factories in the country after a cyber-attack late last month disrupted everything from beer shipments to its accounting system.


All of Asahi's facilities have now partially reopened and restarted production but computer systems remain down, meaning orders are being processed using pen, paper and fax machines.


In a statement on Tuesday, Asahi said it was investigating whether personal information was stolen in the attack.


The company stated its Emergency Response Headquarters were working with cybersecurity experts to restore the system as quickly as possible and would notify those affected by the hack.


Asahi said, As we continue investigating the extent and details of the impact, focusing on the systems targeted in the recent attack, we have identified the possibility that personal information may have been subject to unauthorized data transfer. Should the investigation confirm this, they committed to promptly informing those concerned and taking appropriate measures as per legal requirements on personal data protection.


It remains unclear what specific personal information was compromised, with Asahi refraining from providing further details given the ongoing investigation.


Asahi Group also owns Fullers in the UK and global brands including Peroni, Grolsch, and Pilsner Urquell, but clarified that only its systems and operations in Japan—which represent around half of its sales—were impacted by the attack.


Asahi has apologized for any difficulties caused by the incident and indicated it would delay the disclosure of its third-quarter financial results due to the disruption caused by the cyberattack.


Russian-based ransomware group Qilin has claimed responsibility for the attack, which has previously targeted other major organizations, including the NHS.


This cyber-attack reflects a broader worrying trend, with numerous major firms, including Jaguar Land Rover, Marks and Spencer, and Co-op, also falling victim to similar attacks this year. The UK's National Cyber Security Centre has noted a record increase in significant cyber-attacks, tracking an average of four incidents weekly, urging companies to bolster their cyber protections.