Yakult Australia
bd_ea7052237f272844 · schema v1 · pii pii-v1
Full breach record for Yakult Australia →Press / market disclosure — not a breach-notification filing
A media or market posting that confirms an incident but carries no breach-notification fields, so compliance clocks aren't assessable. The summary below is extracted from the coverage — verify against the source.
Yakult Australia confirms 'cyber incident' after 95 GB data leak. Yakult Australia: Yakult Australia, a manufacturer of probiotic milk drinks, has confirmed it was the victim of a "cyber incident" following the leak of 95 GB of data claimed by the cybercriminal group DragonForce. The attack, which occurred in mid-December, affected the company's IT systems in Australia and New Zealand, but offices remain open and operational. DragonForce published data including company databases, contracts, passports, and other sensitive documents after attempting to extort the company, which refused to cooperate. Linked ransomware group: dragonforce.
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Dec 15, 2023
Press report
—
Corroborated · see linked filings
Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.
Attack → press
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Ransomware claims (2)
- Leak Sitedragonforcebd_f38a5a289bf3ddb42023-12-20 · +5dCandidate
- Leak Sitedragonforcebd_8666abecc66fb7522023-12-15Candidate
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- incident type + narrative only (may be machine-translated)
- discovery date
- materiality
- affected count
- data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
dragonforce
According to ransomware.live, DragonForce is a major ransomware-as-a-service operation first observed in August 2023 that launched a formal affiliate program offering 80% revenue share, then rebranded as a "ransomware cartel" in 2025, gaining notoriety for high-profile attacks on UK retailers Marks & Spencer, Co-op, and Harrods.