Major vodka producer hit by ransomware attack, closes 2,000+ stores
Learn More
Novabev Group, one of Russia's largest alcohol producers and distributor of vodka brands was hit by a ransomware attack on July 14, 2025, that forced the complete shutdown of its WineLab retail chain across Russia.
The company described the incident as an "unprecedented cyberattack – a large-scale, coordinated action carried out by hackers" that crippled critical parts of the company's infrastructure. The ransomware attack impacted WineLab's point-of-sale systems and online services, effectively paralyzing the retail operations. Customers were met with signs on store doors citing "technical issues" as the reason for closure.
The attack also halted the product shipments from Novabev facilities for at least two days. Novabev's corporate website and mobile applications remained offline during the incident.
No details are disclosed about any data compromised or affected individuals.
Forbes Russia estimates a revenue loss of 200-300 million rubles ($2.6-3.8 million) per day of downtime. Total suggested losses for WineLab alone could reach about 1.5 billion rubles (about $18 million). The holding's shares fell 5.5% on the Moscow Exchange following news of the attack.
Novabev Group reports that its IT team is "working around the clock to resolve the situation" and "external experts have been involved" to accelerate the process, with "every effort being made to resume operations as soon as possible."
