Ransomware disables Stoli Group ERP and forces prolonged manual processing

Court filings disclosed on 29 November 2024 that an August ransomware attack caused severe disruption to Stoli Group's IT infrastructure, disabled its ERP/SAP environment and forced internal processes including accounting into manual operation. The disruption affected companies including Stoli Group USA and Kentucky Owl and impaired lender communications. The two U.S. companies subsequently entered Chapter 11, but the ransomware incident was only one of several documented contributors to their financial distress and is not treated as the sole cause of bankruptcy. Because the filings do not identify an exact August attack day, the disclosure date is used for ApproximateIncidentDate.