Japan's Asahi Group on Thursday said the personal details of 1.52 million customers may have been leaked in a September cyberattack.