On September 25, 2024, Compañía Cervecerías Unidas S.A. (CCU), a major beverage company in Chile, experienced a cybersecurity incident that affected its sales and distribution systems. The company quickly detected the breach, which was caused by an external agent. As a result, CCU activated its preventive and responsive protocols, which helped contain the impact on its services and ensured that its operations continued without major disruptions. With the assistance of technical experts, CCU worked through the containment, eradication, and recovery stages to restore the affected systems, aiming to return to normal operations as soon as possible.
The company reported the breach as a “Hecho Esencial,” a significant event required by law to be disclosed to regulatory bodies and the public. The incident, which had affected some of CCU’s internal systems, prompted the company to take swift action in order to protect its data and maintain operational continuity. While the company’s recovery efforts have been ongoing, CCU reassured stakeholders that the disruption to its operations was minimal and that measures were in place to restore systems gradually.
However, the company confirmed that the cyberattack led to a data leak, the full scope and content of which are still being evaluated. CCU is currently conducting a digital forensic analysis to determine the extent of the data breach and to assess any further risks. The company pledged to update the public as soon as the investigation is complete and more information is available regarding the leaked data and potential security risks.
At the time of the report, CCU was unable to predict any financial impact resulting from the cyberattack on its assets, liabilities, or results. The company committed to informing the Comisión para el Mercado Financiero (CMF) and the market at large should there be any financial implications in the future. CCU is continuing its efforts to address the breach and has taken steps to prevent similar incidents in the future while keeping stakeholders informed of any developments.
Reference: