Yakult Australia, the manufacturer of the popular probiotic milk drink, confirmed encountering a “cyber incident” in a statement to BleepingComputer, impacting both its Australian and New Zealand IT systems. The attack also coincided with a 95GB data leak claimed by an online cybercrime group known as DragonForce.
Yakult enjoys global popularity for its purported digestive and immune system benefits. In a statement, Yakult Australia’s Director, David Whatley, acknowledged the attack, stating, “We first became aware of a cyber incident on the morning of the 15th of December. We cannot yet confirm the extent of the incident and are working with cybersecurity experts to investigate it as a matter of urgency.”
While the company remains tight-lipped about the precise nature of the breach, it assured that investigations are ongoing and further updates will be provided as information becomes available. Despite the IT system disruption, Yakult Australia offices in both countries continue to operate normally.
Adding to the concern, BleepingComputer observed a previously blank “important message” modal on the Yakult Australia website now displaying an incident notice, confirming the attack.
Meanwhile, DragonForce took responsibility for the incident, listing Yakult Australia on its dark web leak site as early as December 20th and publicly threatening to release 95.19GB of stolen data. The group followed through on its threat, claiming the data dump contains “company database, contracts, passports and much more.”
BleepingComputer’s analysis of a small sample revealed business documents, spreadsheets, credit applications, employee records, and copies of identity documents such as passports. DragonForce, known for its motto “companies that refused to cooperate,” operates similarly to other cybercrime groups, attempting extortion before resorting to public data leaks for non-compliant victims.
Little is currently known about DragonForce, with its leak site listing 20 victims to date. However, speculation suggests no connection to DragonForce Malaysia, a hacktivist group targeting government agencies in the Middle East.
Yakult Australia’s cyber incident serves as a stark reminder of the ever-present threat of cyberattacks and the importance of robust data security protocols. As investigations continue, businesses and individuals alike must remain vigilant and implement necessary measures to safeguard their sensitive information.
