Lion Cyber incident

By Lion Team

June 15, 2020

Our investigations to date have shown that a system outage has been caused by ransomware. The ransomware targeted our computer systems. In response, we immediately shut down key systems as a precaution. 

Our IT teams and expert cyber advisors are working around the clock, investigating the issue and assessing how long the impacts will continue. Our focus is on bringing systems back online safely so we can resume our business as usual manufacturing, and customer services. This is taking some time, but it is necessary that we work through this properly. 

Current impact on Lion’s operations  

Our teams are working as hard as they can to service customers and suppliers, implementing new manual processes and investigating all alternative options. We recognise this is imperfect and is causing disruption to our valued partners. We also recognise this is happening at an unfortunate time as we emerge from COVID-19 restrictions. 

Lion Australia and New Zealand 

Throughout the COVID-19 shutdown, we were able to continue to brew beer safely. We had stock at hand and were gearing up to increase brewing. This attack has delayed those plans, and because of the situation we have limited visibility of our products. We’re working to bring our breweries back online as soon as possible. In the meantime, we will be managing our stock levels very closely and may see some temporary shortages. 

We apologise in advance to our customers and consumers and ask for their patience as we do what we can to get back to normal supply levels. 

Lion Dairy & Drinks  

In the Dairy & Drinks business, some parts of customer service continue to be impacted and some of our manufacturing sites remain offline. Unfortunately, due to the nature of fresh dairy and juice products we are experiencing some service misses across our customer channels. We are continuing to do all we can to ensure we can service the demand of our customers and have a team of people working with customers to assist with manual ordering and delivery. We appreciate the patience and support of our customers, network partners, suppliers and consumers. There has been no impact to the collection of milk from our dairy farmer partners or fruit from our orange growers. 

Update on our recovery efforts  

We had been hoping to have full access restored by now, but unfortunately this process is taking longer than we hoped.  

There is no evidence that any of the information contained in our system (including financial or personal information) has been affected but this is something that we will review closely as we continue to investigate the incident. 

We have notified the authorities of the incident; and we will work alongside the relevant government authorities, law enforcement agencies and privacy regulators, as required.  

Next steps 

We are working hard to resolve this incident as quickly as we can so we can return to full production and get our products flowing back into the market.  

We will continue to provide regular updates on this webpage.  

10 June 2020:
On Monday Lion was a victim of a cyber-attack. We immediately shut down all our systems as a precaution, and we have continued to work with cyber experts to determine how much longer our systems will be impacted. That said, we have made substantial progress over the last 24 hours in terms of diagnosis and recovery planning.  

We are working through the impacts. There is no evidence to date of any data breaches, but we are still investigating every aspect of this major incident.

To support our customers and suppliers, we have already introduced a number of manual systems to allow us to take orders and then ship products around our networks. 

We recognise that this is not perfect and it is impacting our customers. We are doing everything possible under the circumstances. 

We have teams working around the clock to bring our systems back online safely. Again, we apologise for the inconvenience this has caused our suppliers, customers and our broader supply chain. We appreciate your patience and support during this challenging time.  


We are thankful to our team for responding so quickly, using the latest advanced tools to return systems safely as soon as possible.  

Lion Australia and New Zealand

This attack could not have come at a worse time for Lion, particularly for our valued pub and club customers who are in the very early stages of recovery following the COVID-19 closures. They are in the early stages of rebuilding, restocking and reengaging their staff and in New Zealand are able to operate with no restrictions for the first time in months following the move to COVID-19 Alert Level 1 this week. This has been the most devastating time on record for the hospitality industry.   

Throughout the COVID shutdown, we were able to continue to brew beer safely, meaning we have a good supply of product for the time being. In saying that, this attack has impacted crucial aspects of the brewing process. We operate multiple large-scale breweries, which are heavily reliant on IT infrastructure.     

Lion Dairy & Drinks

In the Dairy & Drinks business, some parts of customer service still remains offline and whilst we are operating across most of our manufacturing network, due to the nature of fresh dairy and juice products there have been some service misses in some customer channels as we have worked to manually key and pick orders. We are continuing to do all we can to ensure we can service the demand of our customers and have a team of people working with customers to assist with ordering and delivery. We thank our customers, network partners, suppliers and consumers for their patience at this time. There has been no impact to the collection of milk supply from our dairy farmer partners or fruit from our orange growers.  

9 June 2020:
Lion has experienced a cyber incident and has taken the precaution of shutting down our IT systems, causing some disruption to our suppliers and customers.  

We’re working with expert advisors to address the issue. We have alerted the authorities and are working hard to minimise disruption to customers and suppliers.  
We will provide further updates when we can, and we thank our customers and suppliers for their patience. 

Terms of Use | Copyright © 2002 - 2020 CONSTITUENTWORKS SM  CORPORATION. All rights reserved. | Privacy Statement