Summary
Asahi Group Holdings, one of Japan’s largest beverage producers known for iconic brands such as Asahi Super Dry Beer, Nikka Whisky, and Mitsuya Cider, faced a major operational crisis beginning September 29, 2025, when a sophisticated cyberattack forced the shutdown of its domestic production network. The attack disrupted critical business functions including order processing, shipping, and call center operations across approximately 30 factories in Japan, halting production with no clear timeline for resumption. This incident highlights significant vulnerabilities in the cybersecurity and operational resilience of Japan’s food and beverage industry, a sector crucial to both domestic markets and international exports.
The shutdown stemmed from a targeted cyberattack that compromised Asahi’s corporate IT infrastructure and manufacturing execution systems (MES), underscoring risks inherent in complex, just-in-time production models reliant on integrated enterprise resource planning (ERP) software. This event is part of a broader pattern of cyber threats against major Japanese industrial firms, coinciding with similar disruptions experienced by companies like Bridgestone Americas and Jaguar Land Rover in 2025. Beyond cyber risks, Asahi’s challenges reflect wider industrial pressures, including labor shortages, rising raw material costs, and prior operational disruptions seen across Japan’s manufacturing sector.
The incident has drawn extensive media coverage and public concern over potential supply shortages of popular beverages, given that around half of Asahi’s sales occur domestically. It has sparked debates on the adequacy of corporate cybersecurity defenses, the limitations of cyber insurance coverage—particularly regarding nation-state or warlike attacks—and the broader implications for industrial supply chain stability in Japan and globally. Asahi’s ongoing recovery efforts emphasize the complexity of restoring integrated production networks amid evolving cyber threats and shifting market demands.
Looking ahead, the Asahi shutdown illustrates the urgent need for enhanced cybersecurity measures and operational resilience in Japan’s manufacturing sector. It also highlights the challenges faced by legacy industrial systems in adapting to digital threats while maintaining supply chain continuity in an increasingly interconnected global economy. The incident serves as a critical case study in balancing technological innovation with risk management to safeguard essential industries.
Background
Asahi Group Holdings, one of Japan’s largest beverage producers known for brands such as Asahi Super Dry Beer, Nikka Whisky, and Mitsuya Cider, experienced a significant disruption starting September 29, 2024, when a cyberattack forced the shutdown of its domestic production network. The company operates around 30 plants across Japan that manufacture beer, beverages, and food products. Following the cyberattack, Asahi suspended operations including order processing, shipping, and call center functions, and has been unable to resume production at its factories. The company has been investigating the full extent of the shutdown and assessing whether all plants have completely stopped production.
This incident highlights vulnerabilities within Japan’s food and beverage sector, especially regarding the resilience of supply chains and digital infrastructure. Given that about half of Asahi Group Holdings’ sales occur domestically, the impact of prolonged production halts could affect product availability in stores, restaurants, and bars within Japan as well as in international markets where Asahi’s products are widely exported.
The broader context also includes Japan’s evolving food and beverage industry, which balances tradition and innovation to meet growing consumer demands for fresh and healthy alternatives. Disruptions to major manufacturers like Asahi raise concerns about supply stability in a key sector of the Japanese economy. Additionally, similar supply chain disruptions have been observed in other Japanese industries such as automotive manufacturing, where shortages of critical components have delayed production and highlighted the global implications of interruptions in Japanese industrial activity.
Causes of Shutdown
The shutdown of Asahi Group’s 30 factories in Japan, beginning on September 29, 2025, was primarily caused by a highly organized cyberattack that resulted in a “systems failure” affecting critical business functions including shipping, customer service operations, and order processing. The attack forced the company to suspend all domestic orders and shipment services, with production halted at several factories and no clear timeline for resumption of operations.
This cyberattack on Asahi is part of a broader pattern of targeted attacks against major Japanese industrial and logistical organizations, particularly those with complex, international supply chains. Similar attacks in September 2025 affected companies like Bridgestone Americas and Jaguar Land Rover, disrupting manufacturing and highlighting vulnerabilities in corporate IT networks and manufacturing execution systems (MES) or enterprise resource planning (ERP) systems that manage production schedules and logistics.
In addition to cyber threats, Japan’s industrial production has faced challenges from natural disasters and supply chain disruptions in recent years. The 2011 Great Tohoku Earthquake and Tsunami devastated critical infrastructure and nuclear reactors, causing significant interruptions to industrial activity and vehicle production, a sector in which Japan plays a leading global role. These events underscored the fragility of supply chains dependent on geographically concentrated suppliers, especially for electronic components.
Moreover, operational issues such as system malfunctions have previously led to factory shutdowns in Japan. For example, Toyota halted production across 14 plants in August 2023 due to a server breakdown caused by “insufficient disk space,” highlighting risks inherent in just-in-time manufacturing systems reliant on seamless IT operations.
Economic factors have also contributed to pressures on manufacturing companies. Since 2022, Asahi Kasei and other firms have faced decreased market competitiveness amid rising raw material costs and imbalanced supply-demand dynamics stemming from increased production capacity in China, adversely affecting profitability and operational sustainability. Seasonal labor fluctuations, such as early departures for holidays including the Chinese New Year, further disrupt manufacturing processes by reducing workforce availability and continuity.
Collectively, these cyberattacks, operational vulnerabilities, economic pressures, and labor challenges have converged to create a precarious environment that precipitated the shutdown of Asahi’s factories in late 2025.
Timeline of Shutdown and Events
On September 29, 2025, Asahi Group, Japan’s largest beer producer, experienced a highly organized cyberattack that forced the company to suspend all domestic orders and shipment services. The attack led to a system outage impacting not only production but also critical business functions including order processing, shipping, and call center operations within Asahi’s group companies in Japan.
By September 30, production remained halted at some of Asahi’s 30 factories, with the company still assessing whether all factories had completely stopped operations. A company spokesperson confirmed that production was offline with no clear estimate for when normal operations would resume, emphasizing ongoing investigations into the extent of the damage caused by the cyberattack.
The disruption affected flagship brands such as Asahi Super Dry, Nikka Whisky, and Mitsuya Cider. The immediate suspension of shipments and orders suggested a compromise of manufacturing execution systems (MES) or enterprise resource planning (ERP) systems like SAP, which are crucial for managing production schedules and logistics.
Asahi Group issued statements confirming active investigations into the cause of the attack and efforts to restore operations, but no estimated timeline for recovery had been provided as of early October 2025.
This incident highlights the vulnerability of complex industrial supply chains to cyber threats, a concern echoed by other recent disruptions in global manufacturing. Similar cyberattacks have impacted companies such as Jaguar Land Rover and Bridgestone, illustrating widespread challenges in industrial cyber resilience and insurance coverage. Additionally, supply chain disruptions caused by external factors like chip shortages amid the coronavirus pandemic compound operational difficulties in manufacturing sectors.
Impact of Shutdown
The shutdown of Asahi’s domestic factories since September 29 has significantly disrupted the company’s production and business operations. Key flagship products such as Asahi Super Dry, Nikka Whisky, and Mitsuya Cider have seen halted production, while essential downstream activities including order processing, shipping, and call center services have also been affected. A company spokesperson confirmed that production remains offline with no definite timeline for resumption, and efforts are ongoing to assess whether all factories have fully stopped operations and to understand the extent of the system damage caused by the incident.
The disruption is believed to have originated from a cyberattack that compromised critical corporate IT networks, subsequently affecting manufacturing execution systems (MES) or enterprise resource planning (ERP) systems such as SAP. These systems are vital for managing production schedules and logistics, which explains the immediate suspension of shipments and order fulfillment. This has underscored vulnerabilities in Asahi’s reliance on just-in-time production methods, where technical glitches can lead to significant operational risks.
The shutdown’s broader implications extend beyond Asahi, reflecting challenges faced by Japanese manufacturing due to labor shortages and disruptions around key holidays such as the Chinese New Year, when many workers do not return to their jobs, causing quality and staffing issues. Furthermore, the halt in Asahi’s operations has likely contributed to uncertainties in Japan’s manufacturing sector, which has been dealing with sluggish output and rising costs in recent years.
Responses and Measures
Following the cyberattack that caused a system outage and halted operations at Asahi Group Holdings’ 30 factories in Japan, the company has been actively investigating the cause and working to restore normal functions. Asahi confirmed that production remains offline, and there is no clear timeline for resumption of operations as of late September 2023. The system failure affected not only production but also critical business functions such as order processing, shipping, and call center services across its domestic group companies.
In response to the incident, Asahi has suspended ordering, shipping, and customer service functions to contain the impact and prevent further disruption. The company spokespersons have emphasized ongoing efforts to assess the extent of the damage to IT systems and whether all factories have completely stopped production. Asahi issued public statements expressing commitment to restore operations as quickly as possible but acknowledged the uncertainty in the recovery timeline.
The interruption has affected key flagship brands including Asahi Super Dry, Nikka Whisky, and Mitsuya Cider, underscoring the significance of the disruption for both production and downstream logistics. Despite the challenges, Asahi’s leadership remains focused on managing the crisis amid broader financial and operational pressures experienced in 2023. The incident highlights the vulnerability of major manufacturing and supply chain operations to cyber threats, prompting the company to strengthen its investigation and response capabilities.
Recovery and Future Outlook
Asahi has been actively investigating the cause of the cyberattack that led to the shutdown of its Japanese operations and is working to restore normal functionality; however, the company has not provided a definitive timeline for recovery. The disruption has significantly impacted production of major brands such as Asahi Super Dry, Nikka Whisky, and Mitsuya Cider, as well as critical downstream business functions including order processing, shipping, and customer service. The complexity of Asahi’s manufacturing networks, which involve legacy infrastructure and multiple technologies, has complicated recovery efforts.
The attack appears to have originated within the corporate IT network before affecting industrial control systems, including manufacturing execution systems and enterprise resource planning software, which are essential for coordinating production and logistics. This mode of attack underscores the vulnerability of integrated supply chains and just-in-time production models to cyber threats. Asahi’s situation parallels other recent incidents in the manufacturing sector, such as those faced by Jaguar Land Rover and Bridgestone, highlighting a broader trend of increasing cyber risks to industrial operations worldwide.
Looking ahead, the ongoing disruption may prompt Asahi and similar companies to reassess their cybersecurity strategies and operational resilience. The manufacturing sector is increasingly recognizing the challenges in obtaining comprehensive cyber insurance coverage due to policy exclusions related to nation-state attacks and war-like incidents. Additionally, shifts in consumer behavior toward specialty and healthy beverages present both challenges and opportunities for recovery and growth within Japan’s evolving food and beverage market. Ultimately, restoring operations will require addressing both technological vulnerabilities and workforce factors, including disruptions caused by holidays and employee turnover.
Media Coverage and Public Opinion
The shutdown of Asahi’s 30 Japanese factories since September 29 has drawn significant media attention both domestically and internationally, highlighting the growing vulnerability of major industrial players to cyberattacks. News outlets emphasized the strategic targeting of Asahi as part of a wider series of cyber incidents against prominent Japanese manufacturers with complex international supply chains, such as the earlier attack on Bridgestone Americas. This narrative has raised broader concerns about the resilience of Japan’s manufacturing sector and the security of its digital infrastructure, given the potential for prolonged operational disruptions to cause product shortages in both domestic and overseas markets.
Public discourse has also focused on the potential economic impact of such shutdowns. While a brief disruption may appear manageable, parallels drawn from past events—such as the partial U.S. government shutdown in 2018-2019—suggest that longer-term halts can inflict measurable economic losses, underscoring the seriousness of the incident. The extensive coverage has heightened awareness about the increasing threat cyberattacks pose to global brands, especially in industries reliant on intricate supply chains and legacy systems.
In addition, there has been discussion around the difficulties companies face in navigating cyber insurance claims following such attacks. Recent shifts in insurance policies, particularly exclusions related to nation-state involvement or war-like scenarios, have complicated recovery efforts for affected industrial firms. This has fueled debates about corporate preparedness and the adequacy of risk management strategies in the face of evolving cyber threats.
On the consumer side, Asahi’s prominence as one of Japan’s largest beverage producers means that public concern extends to the availability of everyday products. Given that about half of Asahi Group Holdings’ sales occur within Japan, any extended disruption could significantly impact retail supply chains and consumer access to popular brands. Furthermore, the shutdown has underscored the importance of adapting to shifting market trends, such as the rising demand for fresh, healthy, and specialty food and beverage products, which remain resilient despite economic uncertainties.
The content is provided by Harper Eastwood, 11 Minute Read
