Japanese retailer Askul halts online orders, shipments after ransomware attack

Japanese office and household goods retailer Askul has halted online orders and product shipments after a ransomware attack crippled its systems, disrupting operations for several major retailers that rely on its logistics network.

The Tokyo-based company said the cyberattack, discovered over the weekend, caused system failures that forced it to suspend operations across its three e-commerce sites — Askul for office supplies, Lohaco for household goods and Soloel Arena for corporate clients.

All new orders and user registrations are suspended, existing shipments canceled, and customer inquiries are unavailable due to service disruptions, the company said in a statement on Sunday.

“We are currently investigating the extent of the impact, including the possible leak of personal and customer data,” Askul added.

The incident has also rippled through Japan’s retail sector. Muji, a household and lifestyle chain that uses Askul’s affiliated logistics company, suspended its domestic online shopping service and parts of its mobile app.

“We are working with Askul to restore operations, but the resumption date remains undetermined,” Muji said Monday, adding that its physical stores and delivery services were unaffected.

Other Japanese retailers — including household goods chain Loft and Sogo & Seibu — also reported disruptions, halting online orders and some product shipments tied to Askul’s logistics systems.

The attack on Askul is the latest of ransomware attacks and other cybersecurity incidents in Japan.  Earlier this month, Japan’s largest brewer, Asahi, said a cyberattack claimed by the Russian-speaking Qilin ransomware gang disrupted production and delayed product launches across the country. Asahi later said personal data may have been illegally accessed.

In a separate case last week, Sagawa Express, one of Japan’s largest transportation companies, reported unauthorized logins to customer accounts traced to compromised credentials, though it said business systems were unaffected.