More than 2,000 WineLab liquor stores across Russia have remained shut for three days following a ransomware attack on their parent company, Novabev Group, one of Russia’s largest alcohol producers. The attack crippled parts of the company’s infrastructure, affecting point-of-sale systems and online services. The company refused to negotiate with the attackers. The cyberattack has halted product shipments for at least two days, and customers reported being unable to pick up orders. Each day of downtime could cost WineLab 200 million to 300 million rubles ($2.6 million to $3.8 million) in lost revenue.
Source: https://therecord.media/novabev-russia-vodka-maker-ransomware-attack
TPRM report: https://scoringcyber.rankiteo.com/company/novabevgroup
"id": "nov601071825",
"linkid": "novabevgroup",
"type": "Ransomware",
"date": "7/2025",
"severity": "100",
"impact": "",
"explanation": "Attack threatening the organization’s existence"{'affected_entities': [{'industry': 'Beverage',
'location': 'Russia',
'name': 'Novabev Group',
'size': 'Large',
'type': 'Alcohol producer and distributor'}],
'customer_advisories': 'Extended storage periods for online purchases',
'description': 'More than 2,000 WineLab liquor stores across Russia have '
'remained shut for three days following a ransomware attack on '
'their parent company, one of Russia’s largest alcohol '
'producers. The attack crippled parts of the Novabev Group’s '
'infrastructure, affecting WineLab’s point-of-sale systems and '
'online services.',
'impact': {'customer_complaints': 'Unable to pick up orders',
'downtime': 'At least three days',
'financial_loss': '200 million to 300 million rubles ($2.6 million '
'to $3.8 million) per day',
'operational_impact': 'Halted product shipments',
'revenue_loss': '200 million to 300 million rubles ($2.6 million '
'to $3.8 million) per day',
'systems_affected': ['Point-of-sale systems',
'Online services',
'Website',
'Mobile app']},
'investigation_status': 'Ongoing',
'motivation': 'Financial Gain',
'ransomware': {'ransom_demanded': 'Yes', 'ransom_paid': 'No'},
'references': [{'source': 'Forbes Russia'}],
'response': {'communication_strategy': 'Public statement',
'recovery_measures': 'Working around the clock to restore '
'operations',
'third_party_assistance': 'External specialists'},
'title': 'Ransomware Attack on Novabev Group',
'type': 'Ransomware'}