Muji, a Japanese retailer specializing in clothing and homeware, suffered severe operational disruptions after its third-party logistics partner, Askul, was hit by a ransomware attack. The attack crippled Muji’s digital infrastructure, halting online browsing, purchases, order history access via the Muji app, and web content display. Askul confirmed a system outage, suspending order processing and shipping operations while investigating potential leaks of personal and customer data, including names, addresses, emails, and financial details—posing risks of identity theft and fraud. The incident underscores vulnerabilities in third-party supply chains, as Askul’s compromise directly impacted Muji’s Japanese operations, though global branches remained unaffected. The attack aligns with a rising trend of ransomware targeting retailers and manufacturers through less-secured vendors, disrupting business continuity and exposing sensitive data. While the full scope of data exposure is under investigation, the operational halt and potential customer data breach signal significant reputational and financial risks for Muji, compounded by the growing threat of supply-chain cyberattacks in the retail sector.