Muji, a Japanese retailer specializing in clothing and homeware, suffered severe operational disruptions after its third-party logistics partner, Askul, was hit by a ransomware attack. The attack crippled Muji’s digital infrastructure, halting online browsing, purchases, order history access via the Muji app, and web content display. Askul confirmed a system outage, suspending order processing and shipping operations while investigating potential leaks of personal and customer data, including names, addresses, emails, and financial details—posing risks of identity theft and fraud. The incident underscores vulnerabilities in third-party supply chains, as Askul’s compromise directly impacted Muji’s Japanese operations, though global branches remained unaffected. The attack aligns with a rising trend of ransomware targeting retailers and manufacturers through less-secured vendors, disrupting business continuity and exposing sensitive data. While the full scope of data exposure is under investigation, the operational halt and potential customer data breach signal significant reputational and financial risks for Muji, compounded by the growing threat of supply-chain cyberattacks in the retail sector.

Ryohin Keikaku, the operator of Muji, halted its domestic online shopping service on October 19 due to a ransomware attack on its delivery partner, Askul. The attack disrupted order processing and shipping operations for Muji’s official online store, with no confirmed resumption date. Askul is investigating potential leaks of personal or customer data, though the scope remains undetermined. The incident follows a broader wave of cyberattacks in Japan, including a separate ongoing attack on Asahi Breweries since late September, also linked to the Qilin ransomware group (allegedly Russian-based). Muji’s parent company saw a 2.5% share drop, while Askul’s shares fell over 5%. The attack forced manual order processing, financial delays (e.g., Asahi postponed earnings reports), and operational disruptions, though Muji’s physical stores and Asahi’s production plants remained partially functional. The perpetrators’ demands were not disclosed, but the attack’s financial, reputational, and operational impact was immediate and significant.