Cyber Incident Victim: Stoli Group
Date:
Sep 2024
Location:
United States of America
Summary
A malicious cyberattack severely disrupted the vodka producer's global operations, forcing manual business processes during system recovery efforts. Combined with protracted legal battles over brand ownership involving the Russian government, the incident contributed to significant financial distress, culminating in a Chapter 11 bankruptcy filing with reported liabilities between $50 million and $100 million. The company's challenges coincided with broader industry declines in alcohol consumption.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 0 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
The Stoli Group USA, maker of Stolichnaya vodka, filed for Chapter 11 bankruptcy in the US Bankruptcy Court in Dallas in late 2024 following a disruptive cyberattack in September of that year. A malicious cyberattack forced the company to operate its global business manually while rebuilding compromised systems, significantly impairing operational capabilities. CEO Chris Caldwell confirmed the attack's impact in bankruptcy filings, which listed corporate liabilities between $50 million and $100 million. The incident compounded existing financial strain from protracted legal disputes with the Russian government over brand ownership rights. Russia's designation of Stoli Group and its owner Yuri Shefler as "extremist groups" earlier in 2024 escalated tensions, continuing a decades-long conflict stemming from Shefler's opposition to Vladimir Putin's regime since his 2002 exile.
Concurrent external pressures included the 2022 rebranding from Stolichnaya to Stoli following Russia's invasion of Ukraine, which aimed to distance the brand from Russian associations despite its Latvian production. Ownership disputes persisted between Shefler's Luxembourg-based SPI Group (Stoli's parent company) and Russian state-owned Sojuzplodoimport, which markets a state-produced version within Russia. Bankruptcy filings cited declining alcohol consumption trends as contributing factors, with US spirits sales down 3% and beer down 3.5% during 2024's first seven months per IWSR data. The bankruptcy exclusively affected Stoli Group USA and Kentucky Owl bourbon assets, not SPI Group's broader portfolio. No technical details regarding the cyberattack's origin, intrusion methods, or data impact were disclosed in available filings or statements.