Cyberattack on Nichirei Logistics Group Disrupts Frozen Food Deliveries to KFC Japan and Thousands of Restaurants Nationwide
A cyberattack targeting Nichirei Logistics Group, Japan's largest operator of refrigerated and frozen logistics, quickly moved beyond computer systems and reached restaurant kitchens across the country. The incident disrupted deliveries to approximately 5,000 clients and caused immediate shortages of essential ingredients, most notably chicken for KFC Japan.
Nichirei Logistics Group reported a major system failure on July 13. Investigators later determined that attackers had gained access to the company's servers. To contain the intrusion and protect client information, Nichirei disconnected key systems, effectively halting large portions of its logistics network that relies on 140 refrigerated distribution centers.
The shutdown prevented normal warehouse operations and the dispatch of frozen and chilled products. During the investigation, the company discovered that personal data was stored on some of the affected servers. Nichirei notified Japan's data protection authority and stated it would publicly disclose any confirmed data theft once the review is complete.
The company has not revealed the identity of the attackers, the method used to breach its systems, or whether ransomware was deployed, citing security concerns. Technical details of the incident have also been withheld.
Clients dependent on Nichirei's infrastructure felt the effects almost immediately. KFC Japan confirmed that supplies to all of its more than 1,300 restaurants were disrupted, including chicken required for its signature Original Recipe. Some locations may reduce menu options or operating hours, and temporary closures remain possible if stocks run out. The chain also suspended online and mobile app orders because timely deliveries could not be guaranteed.
Other major operators reported similar problems. The ready-meal chain Hotto Motto, restaurant operator Yayoi Ken, and sushi chain Kura Sushi all experienced delivery interruptions. Supermarket chain Aeon faced product shortages in some stores, while frozen-food manufacturer TableMark was unable to ship goods to retail and corporate customers.
Nichirei expects to begin phased restoration of services on July 17, although no timeline has been provided for a complete return to normal operations.
Related articles
WordPress to Automatically Block High-Risk Plugin Updates Before Distribution
WordPress is introducing an automated security screening process for every new plugin release before it reaches millions of sites through the WordPress.org API. Updates flagged with high risk will be blocked from automatic installation, giving developers time to address issues. Previously, only initial plugin submissions were reviewed, while subsequent versions could introduce vulnerabilities, backdoors, or malicious ownership changes without checks. Each release now undergoes a six-hour delay under the Protect The Shire initiative, where multiple AI models and Jetpack Scan analyze changes to produce a combined risk score. High-risk updates are withheld from auto-updates, and developers receive detailed reports. The system has already proven effective by catching a backdoor in a plugin with around 20,000 active installations on July 28, preventing distribution after Wordfence notification. Developers can fix problems and resubmit, or appeal results, though fixing is usually faster than manual review.
Twitch Enhanced Viewer Extension Leaks OAuth Tokens From Nearly 31,000 Users
The browser extension Twitch Enhanced Viewer | JeetBot, available in the official Chrome Web Store and Mozilla Add-ons, secretly forwarded OAuth session tokens to proxies controlled by its operator. These bearer tokens allow full account takeover without passwords or second-factor authentication, enabling actions such as reading and sending whispers, posting in chat, and modifying account settings. The issue surfaced prominently in the v85.x branch where tokens were appended as the &auth= query parameter during network redirects to operator-controlled proxy servers, exposing them in clear text within proxy logs. Earlier v4.x versions had already transmitted tokens via POST requests to a set-token endpoint and backup servers on deno.dev and deno.net. A fix appeared in Firefox version 85.8.7 that stops token exfiltration by altering playlist retrieval, while a Chrome patch is in preparation. Users are advised to uninstall the extension immediately, revoke all active Twitch sessions, and review recent account activity for signs of unauthorized use.
Twitch Enhanced Viewer Extension Leaks OAuth Tokens from Nearly 31,000 Users
The browser extension Twitch Enhanced Viewer | JeetBot, available in the official Chrome Web Store and Mozilla Add-ons, secretly forwarded OAuth session tokens to proxies controlled by its operator. These bearer tokens allow full account takeover without passwords or second-factor authentication, enabling actions such as reading and sending whispers, posting in chat, and modifying account settings. The issue became especially severe in the v85.x branch, where tokens were appended as the &auth= query parameter during network redirects to the operator’s proxy servers, exposing them in clear text within proxy logs. Earlier versions had already transmitted tokens via POST requests to a set-token endpoint and maintained backup endpoints on deno.dev and deno.net. A fix is available in Firefox starting with version 85.8.7, which stops token exfiltration by changing the playlist retrieval method, while a corresponding Chrome patch is in preparation. Users are advised to uninstall the extension immediately, revoke all active Twitch sessions, and review recent account activity for signs of unauthorized use.
Widespread AI Outage Exposes Fragile Cloud Dependencies Behind ChatGPT, Claude and Grok
On September 3, major AI services including ChatGPT, Claude, Grok, Copilot and Gemini suffered a simultaneous outage lasting nearly four hours. The incident began around 9:30 a.m. ET with ChatGPT and rapidly spread, generating over 12,000 reports on Downdetector within twenty minutes. Industry analysis points to underlying cloud infrastructure rather than the models themselves, with Microsoft Azure and Cloudflare identified as the most likely points of failure. Developers relying on tools such as Cursor experienced immediate loss of code completion and intelligent assistance, forcing manual workflows. The event highlighted single points of failure created by heavy concentration of AI workloads on a small number of cloud providers. Security professionals are urged to map AI supply chains, prepare fallback procedures, monitor infrastructure status pages and adopt multi-vendor routing for critical operations.