Yakult, World’s Leading Probiotic Drink Producer, Suffers Large-Scale Data Breach

Yakult, the world’s largest producer of probiotic drinks, has fallen victim to a significant cyberattack that has exposed private data and confidential corporate records on the dark web. This breach raises concerns about data security and the potential impact on Yakult’s reputation and future actions.

The Threat Actor and Data Breach

DragonForce, a notorious threat actor, has claimed responsibility for the breach. This cybercriminal group has reportedly gained unauthorized access to over 95GB of Yakult’s sensitive data. Despite the severity of the attack, Yakult remains tight-lipped, refusing to divulge further details regarding the breach.

Confirmation of Ransomware Attack

Sources have confirmed that Yakult, a Melbourne-based company located in Dandenong, has indeed suffered a ransomware attack. ABC Investigations has independently verified the incident, highlighting the credibility of the breach.

DragonForce’s Targets and Responsibilities

DragonForce has been actively targeting organizations since the beginning of December, singling out companies that have declined to cooperate. Yakult is just the latest victim under this threat actor’s radar. With their audacious claim of responsibility, DragonForce flaunts their ability to infiltrate even well-established and reputable companies.

Analysis of Leaked Files

An analysis conducted by ABC reveals that the leaked files contain Yakult’s confidential information dating back to 2001. This includes a trove of data pertaining to Yakult’s operations, employee records, and customer details. Shockingly, the exposed information includes scans of passports, pre-employment medical assessments and certificates, salaries, and performance reviews. Furthermore, another database containing the names and addresses of nearly 9,000 individuals has been discovered.

Yakult’s Response

On December 15, Yakult Australia became aware of the cyberattack. In response, the company promptly issued a statement on its website, acknowledging the incident and vowing to collaborate with cyber incident experts to investigate the extent of the breach. Despite the breach, Yakult assures the public that all its offices in Australia and New Zealand remain open and operational.

Implications and Impact

This data breach poses significant risks to Yakult’s reputation, customer trust, and overall business operations. The leak of sensitive employee information, along with customer data, has serious privacy and security implications. Yakult will need to act swiftly to regain customer confidence and ensure that adequate cybersecurity measures are in place to prevent future breaches.

The breach targeting Yakult, the leading producer of probiotic drinks worldwide, has exposed the company’s private data and corporate records on the dark web. The responsibility lies with the threat actor group DragonForce, which has been on a spree targeting organizations that refuse to cooperate. The leaked files, containing sensitive information dating back to 2001, including employee records and customer details, pose a severe threat to Yakult’s reputation and customer trust. In a time where cyber threats are evolving, this incident serves as a critical reminder for organizations to reinforce their cybersecurity measures and protect sensitive data from malicious actors. Yakult must take immediate action to rectify the breach, regain the trust of its customers, and prevent future cyber threats.

Explore more

Sui vs. Ethereum: A Comparison of Scaling and Architecture

The Move programming language used by Sui treats digital assets as resources to eliminate reentrancy bugs at the compiler level rather than through manual audits. This fundamental innovation has established a new benchmark for smart contract safety at a time when the decentralized economy is processing trillions in annual volume. In the current landscape, the industry is witnessing a sophisticated

Can macOS Successfully Run on Snapdragon Windows Laptops?

The Snapintosh project serves as a technical blueprint for running high-end Apple software on a diverse range of Qualcomm-powered devices and portable devices. This initiative marks a definitive moment in the computing landscape as enthusiasts successfully navigate the transition from Intel-based systems to the highly efficient ARM architecture. The convergence of hardware standards in 2026 has allowed for a renewed

Vertice Launches AI-Driven Procure-to-Pay Platform

Strategic spend management requires more than passive record-keeping, moving instead toward agentic AI that identifies and corrects financial discrepancies automatically. Vertice has successfully transitioned from a specialized procurement utility into a robust, end-to-end financial ecosystem through the launch of its integrated Procure-to-Pay platform. This development represents a significant milestone for the company, which previously focused on the Intake-to-Procure segment of

Anthropic Launches Claude Duet Proactive AI Agent for Work

As a dedicated productivity tool, Claude Duet focuses primarily on professional and operational workflows rather than the casual personal errands handled by traditional voice assistants. This shift represents a fundamental change in how software interacts with the human workforce, moving away from the static request-response cycle that defined the early era of generative intelligence. By operating on a persistent cloud-based

Closing the Privilege Gap With Idira Integrated Governance

The mover phase of an employee lifecycle often becomes a security black hole where old permissions are retained while new ones are added to the profile. This specific phenomenon, frequently referred to as privilege creep, creates a widening gap between the access an individual actually requires and the expansive permissions they technically possess. In the current cybersecurity environment of 2026,