Yakult Australia suffered a cyberattack executed by the DragonForce hacking group during the holiday season, resulting in a significant data breach. The attackers exfiltrated over 95GB of sensitive data, including business documents, credit applications, and employee records, which were later exposed on DragonForce’s Onion leak site on December 20. The breach was publicly disclosed after the group posted a threat detailing the compromised information. Yakult Australia acknowledged the incident and confirmed operational continuity while engaging cyber incident response experts and notifying Australian and New Zealand authorities for investigation and mitigation. The breach aligns with DragonForce’s history of targeting organizations like Ace Air Cargo and Kinetic Leasing, reinforcing the group’s persistent threat to corporate data security. The exposed employee records and business-sensitive documents pose risks of financial fraud, identity theft, and reputational damage, necessitating urgent containment measures.