A shocking story of how hackers brought a brewing giant to its knees, forcing it back to the old-school methods of pen and paper. This is a tale that highlights the very real and disruptive impact of cyber-attacks, and how even the biggest companies can be brought to a standstill.
In a cozy Tokyo suburb, the shelves of Ben Thai restaurant are almost bare, with just four bottles of Asahi Super Dry beer remaining. The owner, Sakaolath Sugizaki, is facing a beer shortage due to a recent cyber-attack on Asahi, Japan's leading beer producer.
The attack, which occurred at the end of last month, forced Asahi to halt production at most of its 30 factories across Japan. While some facilities have partially reopened, their computer systems remain down, resulting in manual order processing and a significant reduction in shipments.
Asahi's dominance in the Japanese beer market, accounting for around 40% of sales, means that this disruption has a massive impact on bars, restaurants, and retailers. The company has apologized for the difficulties caused but has not provided a timeline for a full recovery.
The BBC's visit to convenience stores and supermarkets in Tokyo and Hokkaido revealed that workers are selling their current stock and unable to place new orders for Asahi products, including water and food items. Hisako Arisawa, a liquor store owner, expresses concern for her customers, as she can only obtain a limited number of Super Dry bottles at a time.
The problem extends beyond beer, with shortages of Asahi's soft drinks, such as ginger beer and soda water, also reported. Last week, major convenience store chains warned customers of expected shortages, with Famimaru bottled teas, made by Asahi, being particularly affected.
Mr. Nakano, an alcohol wholesaler, shares his experience of receiving only 10-20% of the usual shipment amounts from Asahi. His orders are now handwritten and sent via fax, with Asahi notifying him by fax when trucks are ready to leave the factory.
While Asahi's European brands, including Peroni and Grolsch, have not been affected, the ransomware group Qilin has claimed responsibility for the attack. This group operates a platform that enables users to carry out cyber-attacks in exchange for a cut of the extortion proceeds.
Asahi has not confirmed the nature of the attack but has acknowledged that suspected leaked data has been found online. This incident is part of a series of cyber-attacks targeting major firms worldwide, including carmaker Jaguar Land Rover and retail giant Marks and Spencer.
The vulnerability of Japan to such attacks has been a topic of discussion, with experts highlighting a lack of cybersecurity professionals and low digital literacy rates in business software. Cartan McLaughlin from Nihon Cyber Defence Group warns that Japan's reliance on legacy systems and a high level of trust make it an attractive target for hackers.
Japan's Chief Cabinet Secretary Yoshimasa Hayashi has confirmed that the Asahi cyber-attack is under investigation, and the government is committed to improving its cyber capabilities. Earlier this year, Japan passed the Active Cyber Defense Law (ACD), granting the government more powers to combat cyber-attacks and share information with companies.
However, for small businesses like Ben Thai and its customers, this law offers little comfort. Owner Sakaolath is uncertain about the future of her Super Dry orders, and many others across Japan share her concerns.
This story serves as a stark reminder of the potential consequences of cyber-attacks and the need for robust cybersecurity measures.
