Impact of Asahi cyber attack laid bare as company confirms 1.5 million customers exposed

"Ransomware was deployed simultaneously, encrypting data on multiple active servers and some PC devices connected to the network,"

"While investigating the extent and details of the impact, focusing on the systems targeted in the attack, we identified that some data from company-issued PCs provided to employees had been exposed."

An attacker gained unauthorized access to Asahi's data center network via network equipment at the company's headquarters on 29 September and deployed ransomware that encrypted multiple active servers and some PC devices. Personal information for 1.5 million customers who contacted Asahi Breweries, Asahi Soft Drinks, and Asahi Group Foods customer service centers was exposed, including names, gender, addresses, phone numbers, and email addresses. External telegram recipients' names, addresses, and phone numbers were accessed. Employee data, including names, dates of birth, addresses, phone numbers, email addresses, and some family members' details, were also impacted. The company reports no evidence of online publication and says the incident was limited to systems managed in Japan. Recovery actions include phased system restoration, redesigned communication routes and network controls, restricted external connections to secure zones, improved monitoring, and updated backup and business continuity plans.

Read at IT Pro