Novabev Group

Novabev Group, the parent company of premium vodka brand Beluga, suffered a sophisticated ransomware attack on July 14, 2025, disrupting IT infrastructure across the company and its WineLab subsidiary. The attack temporarily knocked out critical IT systems, rendering some services unavailable and forcing emergency protocols. While the company refused to pay the ransom, the incident caused operational disruptions, requiring round-the-clock recovery efforts with external cybersecurity experts.Though no customer data was confirmed compromised, investigations remain ongoing to assess the full impact. The attack highlighted vulnerabilities despite Novabev’s prior investments in cybersecurity, including vulnerability assessments, monitoring, and employee training. The company emphasized its commitment to strengthening defenses against future threats while apologizing to customers and partners for the inconvenience. Operations are gradually being restored as the investigation concludes.

Source: https://gbhackers.com/beluga-ransomware-attack/

TPRM report: https://www.rankiteo.com/company/novabevgroup

"id": "nov4602046100325",
"linkid": "novabevgroup",
"type": "Ransomware",
"date": "7/2025",
"severity": "75",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': 'none reported',
                        'industry': 'beverage (spirits)',
                        'location': 'Russia',
                        'name': 'Novabev Group',
                        'type': 'parent company'},
                       {'industry': 'beverage (wine/spirits)',
                        'name': 'WineLab',
                        'type': 'subsidiary'},
                       {'industry': 'vodka',
                        'name': 'Beluga',
                        'type': 'brand'}],
 'customer_advisories': 'Public statement released; no specific advisory '
                        'details provided.',
 'data_breach': {'number_of_records_exposed': '0 (preliminary assessment)',
                 'personally_identifiable_information': 'none reported',
                 'type_of_data_compromised': 'none reported'},
 'date_detected': '2025-07-14',
 'date_publicly_disclosed': '2025-07-16',
 'description': 'Novabev Group, the parent company of premium vodka brand '
                'Beluga, confirmed a large-scale ransomware attack on July 14, '
                '2025, disrupting IT infrastructure across the company and its '
                'WineLab subsidiary. The attack temporarily knocked out '
                'portions of the company’s IT systems, rendering some services '
                'unavailable. The company refused to pay the ransom demand and '
                'assembled a 24/7 response team with external cybersecurity '
                'experts to restore operations. Preliminary investigations '
                'suggest no customer data was compromised, though the full '
                'extent of the breach is still under review.',
 'impact': {'brand_reputation_impact': 'potential (acknowledged inconvenience '
                                       'to customers and partners)',
            'data_compromised': 'none (preliminary assessment)',
            'downtime': 'temporary (duration unspecified)',
            'identity_theft_risk': 'none reported',
            'operational_impact': 'disruption of operations across Novabev '
                                  'Group and WineLab subsidiary',
            'payment_information_risk': 'none reported',
            'systems_affected': ['IT infrastructure',
                                 'services and tools (partial disruption)']},
 'investigation_status': 'ongoing (as of July 16, 2025)',
 'lessons_learned': 'Acknowledged evolving cybercrime aggression; commitment '
                    'to strengthening defenses based on incident insights.',
 'motivation': 'financial (ransom demand)',
 'post_incident_analysis': {'corrective_actions': ['strengthening defenses',
                                                   'minimizing future risk']},
 'ransomware': {'ransom_demanded': 'yes (monetary reward, amount unspecified)',
                'ransom_paid': 'no (company refused to negotiate)'},
 'references': [{'date_accessed': '2025-07-16',
                 'source': 'Novabev Group Official Statement'}],
 'response': {'communication_strategy': ['official public statement (July 16, '
                                         '2025)',
                                         'apology to customers/partners',
                                         'transparency about ongoing '
                                         'investigations'],
              'enhanced_monitoring': 'yes (pre-existing daily monitoring '
                                     'systems)',
              'incident_response_plan_activated': 'yes (emergency protocols '
                                                  'implemented)',
              'recovery_measures': ['24/7 response team',
                                    'continuous IT department efforts'],
              'remediation_measures': ['restoration of IT systems',
                                       'reinforcement of security measures'],
              'third_party_assistance': 'yes (external cybersecurity experts '
                                        'engaged)'},
 'stakeholder_advisories': 'Apology issued to customers and business partners '
                           'for inconvenience; thanked for patience.',
 'title': 'Sophisticated Ransomware Attack on Novabev Group (Parent Company of '
          'Beluga Vodka)',
 'type': ['ransomware', 'cyberattack']}