Winlab

VinLab drinks supermarkets are 660 stores throughout Russia: from St. Petersburg to Yuzhno-Sakhalinsk (data for 2021). It is one of the three largest specialized networks in the country.

Specialization - alcoholic and non-alcoholic beverages in all popular categories with an emphasis on high quality products.

The VinLab network is part of the Beluga Group, the largest alcohol company in Russia, which traces its history to 1999.

Performance indicators

2024: Revenue growth by 27% to RUB 86.3 billion

At the end of 2024, the VinLab chain of alcomarkets (part of the Novabev Group structure) recorded revenue of 86.3 billion rubles. This is 27% more compared to the previous year, when the figure was 67.9 billion rubles. Such data are given in the financial statements published in early April 2025.

The indicator EBITDA (profit before interest, taxes and depreciation) on an annualized basis increased from 8.2 billion rubles to 10.2 billion rubles. The traffic of the VinLab alcomarkets network in relation to 2023 rose by 11.2%, and the average check - by 14.6%. Excluding organic growth, comparable sales increased by 11%.

𝓲

Фото: Freepik

The company is actively developing its business. At the end of 2024, the number of VinLab chain outlets reached 2041, which corresponds to an increase of 23% year-on-year. This was facilitated by expansion in almost all regions of presence. The company focused on efficiency, increased productivity and further automation of operations, as well as on the development of the range and improvement of processes.

The e-commerce sector is expanding: online sales through the click & collect system increased by 39%, the number of orders - by 41%. The share of e-commerce in the total network volume was 11%. VinLab's own storefronts appeared on all key Russian marketplaces: they include Yandex.Market, Wildberries, Ozone, Megamarket and Cooper.

In 2025, Novabev Group will continue to operate as part of its strategy. Ahead are the launches of new products, as well as ensuring the high quality of existing positions, scaling up VinLab, strengthening partnerships with chains and foreign alcohol producers, the company notes.[1]

History

2025

Full recovery one month after cyber attack

The Vinlab alcohol store chain has fully restored its digital services after a large-scale cyber attack. This became known in mid-August 2025. The retailer resumed the operation of the online store, mobile application and loyalty program more than a month after the incident.

According to Interfax, the attackers disrupted the performance of a significant part of the alcohol retailer's IT infrastructure, which led to serious failures in customer service. Cybercriminals blocked access to the company's key systems and demanded a monetary reward for restoring services.

𝓲

Фото: Freepik

The management of Novabev Group categorically refused to negotiate with hackers and fulfill their financial requirements. The company announced a principled position of rejection of any form of interaction with cybercriminals. This decision received unanimous support from all business stakeholders.

The cyber attack significantly limited the ability of buyers to make purchases both at physical retail outlets and through digital sales channels. Customers were unable to use online orders, the mobile app, and the WINCLUB rollup program throughout the recovery period.

Upon completion of work to eliminate the consequences of the attack, the network announced the complete resumption of the winelab.ru website and mobile application. Loyalty program participants got access to all previously accumulated points and statuses in personal accounts.

The company's specialists conducted a thorough investigation of the incident and found that the personal data of the buyers were not injured as a result of the attack. However, work to study all the circumstances of the incident continues.^[2]

Store openings after 8 days of downtime due to 'unprecedented cyber attack'

Novabev Group, which owns the Winlab retailer, is gradually resuming the network after a hacker attack and 8 days of downtime: more than 100 stores have already been opened, it is planned to enter full operation in all regions of presence within a week. This was announced in July 2025 by the company. The group was subjected to an unprecedented cyber attack, which, in particular, did not work stores and the retailer's website. The company rejected hackers' demand for money.^[3]

Simple for 3 days due to ransomware virus attack - hackers demand ransom, the company will not pay

On July 16, 2025, Novabev Group, which owns the Vinlab alcohol retail chain, reported an "unprecedented cyber attack" on its IT infrastructure. The attackers demanded a ransom, but the company does not intend to pay. At the same time, Vinlab stores have not been operating for three days, and the total losses due to cyber intrusion may exceed 1 billion rubles.

Novabev Group said in an official statement that the incident occurred on July 14, 2025. We are talking about "a large-scale and coordinated action carried out by hackers." As a result, the operability of part of the IT infrastructure was disrupted, and some services and tools of the group as a whole and the Vinlab network, in particular, were unavailable.

𝓲

Фото: Freepik

The attackers got in touch and put forward a demand for the payment of monetary remuneration. The company adheres to the principled position of rejection of any forms of interaction with cybercriminals and categorically refuses to fulfill their requirements, the Novabev Group said.

The company emphasizes that specialists are working around the clock to fix problems, and external experts are involved to speed up the process. As of July 17, 2025, the Vinlab website does not function - it talks about technical work. According to the results of the preliminary investigation, the personal data of customers were not affected.

Cybercrime is getting more aggressive. We will learn lessons and strengthen defense mechanisms to minimize the risks of such attacks in the future, the Novabev Group emphasizes.

As Forbes notes, referring to the statements of INFOLine CEO Ivan Fedyakov, every day of downtime costs the Vinlab network 200-300 million rubles in revenue, excluding other losses. Thus, losses from a three-day downtime can range from 800 million to 1.2 billion rubles.^[4]

Suspension of sales in stores due to a major IT failure

On July 14, 2025, a large-scale failure occurred in the IT infrastructure of the Vinlab alcohol market network. Due to problems that arose, sales in stores were stopped. The company's website is not available for visiting, ordering and working in your personal account.

The Winlab network said in a statement that the difficulties observed were due to technical problems. According to information on the DownDetector resource, most complaints about the operation of the company's services come from the Tver region (28%), Moscow (23%), St. Petersburg (14%) and the Moscow region (9%).

𝓲

Фото: Winlab

For technical reasons, the possibilities of buying online and in stores are limited. Our team makes every effort to quickly resume work in full. We regret the inconvenience caused, - said in the message "Vinlab."

What exactly the problems are connected with is not specified. Customers say that they cannot pick up previously made orders from Vinlab, since the stores do not serve visitors. At the doors of retail outlets, customers are greeted with an announcement that, for technical reasons, work has been temporarily suspended.

According to the Telegram channel Readovka, the IT failure arose due to a "large-scale hacking of internal servers." The chain of alcomarkets stopped working at once in all Russian regions. Vinlab itself told Uplift that the problems are related to the QR code reading system.

At the moment, technical work is taking place on our website. Retail stores throughout Russia are currently down. We do not have the opportunity to sell alcoholic beverages. In some stores, only food products can be sold, such as chocolate, chips that do not have a brand, QR code. We are trying to get things going as soon as possible. Unfortunately, the timing of the solution to the problem is currently unknown, the message says.[5]

2024: Millions of customers' data leaked

In early July 2024, it became known that cybercriminals hacked the information infrastructure of the Vinlab chain of alcoholic beverages stores. As a result, the personal data of millions of visitors to these outlets were leaked.

According to the Telegram channel "Information Leaks," a fragment of the Vinlab network base has appeared in the public domain on the Internet, containing more than 408 thousand lines with information about buyers. These are, in particular, their full name, phone numbers, email addresses, hashed passwords, loyalty card numbers, the number of bonuses, etc.

𝓲

Фото: Unsplash

Moreover, it is noted that the full dump unloaded by attackers from MS SQL Server contains much more personal data: approximately 8.2 million unique phone numbers and 1.6 million unique email addresses. In addition, this database includes buyer addresses, order information, support calls, and other information. The information is relevant - it dates from July 6, 2024.

Stolen data can be used to organize personalized phishing attacks and other fraudulent schemes aimed at stealing money. The city news agency "" Moscow notes that Roskomnadzor it will send a request to the Vinlab chain of stores about the incident. According to law No. 152-FZ, the operator who leaked personal data is obliged to notify the department of this within 24 hours.

As of 14:00 on July 9, 2024, the department did not receive a notification of the leakage of personal data from the Vinlab company. If no notification is received within the specified time frame, Roskomnadzor will send a request to the company for a possible leak of these clients of this organization, the regulator said.[6]

2020

In 2020, as part of the Retail Week Awards, the Winlab supermarket chain was recognized as the winner in the nomination "Fastest Growing Food Chain."

2014

As of 2014, VinLab is represented in 7 regions of the Russian Federation. The owner was Synergy with a 100% share.

2012

The company "Winlab" was formed in 2012.

Notes