Kura Sushi reported food shortages at dozens of locations in western Japan on Wednesday following a cyberattack on supplier Nichirei [1], [2].

This disruption highlights the vulnerability of just-in-time food supply chains to digital interference. Because modern logistics rely on integrated software to move perishable goods, a single system failure can trigger immediate shortages across an entire regional network.

The shortages affected approximately 30 to 50 stores [1]. Specifically, items such as "yuzu salt seared bonito" and "aged pufferfish" were unavailable at several locations in the Kansai region [1], [2]. Kura Sushi said these shortages occurred on July 15 [2].

The root cause was an unauthorized access incident at Nichirei, which was first disclosed on July 13 [2]. This breach caused a system failure that delayed or prevented the delivery of ingredients to various clients [1], [3].

While Kura Sushi is the most prominent example of the fallout, the system failure at Nichirei also impacted other major entities, including Aeon and KFC [1]. The exact number of affected businesses remains unclear, but the incident has disrupted the flow of frozen, and chilled goods across multiple sectors.

Nichirei has not yet provided a timeline for full system restoration. Kura Sushi said it has not released the specific names of the affected stores, though it confirmed the issues are concentrated in the Kansai area [1], [2].

“A single system failure can trigger immediate shortages across an entire regional network.”

The incident underscores a growing trend of 'supply chain contagion,' where a cyberattack on a mid-stream logistics provider creates a ripple effect for end-consumers. By targeting the digital infrastructure of a major distributor like Nichirei, attackers can effectively freeze the physical movement of goods, demonstrating that cybersecurity is now a critical component of food security and operational stability for the hospitality industry.