Asahi has confirmed the full scope of its 2025 ransomware attack

Asahi Group Holdings published a formal notification on 17 July 2026 regarding personal information exposed as a result of the ransomware cyberattack that struck the company on 29 September 2025. Today’s announcement – “Regarding Personal Information That May Have Been Exposed Due to a Cyberattack” – represents the conclusion of a nine-month investigation and the formal notification phase in which affected individuals are being contacted. The announcement confirms the scope of the exposure, the categories of individuals affected, and the company’s position on the data’s current status. This is the sixth update Asahi has published on the incident since the attack was first disclosed in September 2025.