Asahi Group Holdings listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: Japan
• Sector: Agriculture and Food Production
• Announcement date: October 15, 2025

Qilin ransomware group claims attack on Asahi Group Holdings

The Qilin ransomware group has listed Asahi Group Holdings on its dedicated leak site, claiming to have obtained data from the organization. This announcement, made on October 15, 2025, indicates that the threat actor claims to have gained access to the digital assets of the Japanese-based corporation.

The listing suggests that the organization's operational data may be at risk of being published by the threat actors. Such claims by ransomware groups often serve as a precursor to the release of sensitive information if specific demands are not met. In this instance, the announcement type is categorized as a data breach (veri_sizintisi).

Details of the alleged breach

According to the information provided by the threat actor, the attack was claimed to have occurred on October 15, 2025. The group has posted the organization on its platform, asserting that they have successfully breached the company's digital perimeter and accessed internal assets.

Regarding the specifics of the incident, the current records do not provide details on the volume or nature of the information involved. Specifically, there is no information regarding the nature or scope of the leaked data in the available records or screenshots. The listing does not specify the total number of files involved, the total size of the data, or any specific ransom demand made by the group.

About Asahi Group Holdings

Asahi Group Holdings is a global food and beverage manufacturer headquartered in Tokyo, Japan. Founded in 1889, the company has a long-standing history in the industry. The organization specializes in a variety of products, including alcoholic and non-alcoholic beverages as well as various snack products.

Potential impact and industry implications

This incident may lead to operational disruptions and reputational damage for Asahi Group Holdings. Given the double-extortion tactics employed by the Qilin group, there may be a risk that the allegedly stolen data could be published or sold to third parties. Double extortion is a common ransomware tactic where attackers not only encrypt an organization's data but also steal it, threatening to leak it publicly to increase the pressure to pay the ransom.

The organization may face legal obligations under Japan's Act on the Protection of Personal Information (APPI). Furthermore, if the data includes employee or customer information, it could create a foundation for identity theft and targeted phishing attacks. Ransomware groups often use stolen credentials or personal details to launch follow-up social engineering campaigns against both the organization and its stakeholders.

Qilin is known as a Ransomware-as-a-Service (RaaS) group that has been active since 2022, targeting various sectors. Organizations operating in the food and beverage sector often face significant risks from such actors due to the critical nature of their supply chains and the sensitivity of their operational and consumer data. To mitigate such risks, organizations typically focus on robust backup strategies, multi-factor authentication, and continuous monitoring of their digital environments to detect unauthorized access before data can be exfiltrated.