How hackers forced brewing giant Asahi back to pen and paper

Only four bottles of Asahi Super Dry beer are left on the shelves of Ben Thai, a cosy restaurant in the Tokyo suburb of Sengawacho.

Its owner, Sakaolath Sugizaki, expects to get a few more soon, but she says her supplier is keeping the bulk of its stock for bigger customers.

That's because Asahi, the maker of Japan's best-selling beer, was forced to halt production at most of its 30 factories in the country at the end of last month after being hit by a cyber-attack.

While all of its facilities in Japan - including six breweries - have now partially reopened, its computer systems are still down.

That means it has to process orders and shipments manually - using pen, paper and fax machines - resulting in much fewer shipments than before the attack.

Last week, some of the country's biggest convenience store chains warned their customers to expect shortages.

FamilyMart said its Famimaru range of bottled teas, which are made by Asahi, were expected to be in short supply or out of stock.

7-Eleven halted shipments in Japan of Asahi products, while Lawsons also said it expected shortages.

Mr Nakano, who didn't want to share his first name, works for an alcohol wholesaler.

While some shipments from Asahi have resumed, he says he is only getting about 10-20% of the normal amount.

His orders are now handwritten and taken by fax. Asahi notifies him by fax when lorries are ready to leave its factory.

Asahi also owns big brands in Europe - such as Peroni, Grolsch, and the British brewer Fuller's - but the firm has said those operations have not been affected by the cyber-attack.

Ransomware group Qilin - which has previously hacked other major organisations - has claimed responsibility for the attack on Asahi.

It operates a platform that allows users to carry out cyber-attacks in exchange for a percentage of extortion proceeds.

Asahi has not confirmed the nature of the attack on its operations but has said data suspected to have been leaked in the hack had been found on the internet.

It is the latest in a series of cyber-attacks by other hacking groups that have hit major firms around the world, including carmaker Jaguar Land Rover and retail giant Marks and Spencer.

Travellers were delayed at a number of European airports in September after a ransomware attack disrupted check-in and boarding software.

Back in Japan, a cyber-attack paralysed operations at a container terminal in the city of Nagoya for three days in 2024.

Japan Airlines was also hacked last Christmas, causing delays and cancellations to domestic flights.

Additional reporting by Chie Kobayashi in Tokyo