Japanese Retailer Muji Halted Online Sales After Ransomware Attack on Logistics Partner

Japan's iconic retailer Muji was forced to suspend online sales after a devastating ransomware attack hit its logistics partner Askul, disrupting orders, app services, and website access. The cyber incident has left customers in the dark, with many unable to track their shipments or access their account information.

Muji, known for its minimalist design and "no-brand" philosophy, is a giant in the Japanese retail market, with over 24,500 employees and $4 billion in annual revenue. The company's online store has been shut down until further notice, leaving customers to wonder when they will be able to shop as usual.

Askul, Muji's logistics partner, was the target of a ransomware attack on October 21, 2025. The company's website is currently experiencing a system outage due to the infection, halting order acceptance and shipping operations. In a statement, Askul apologized for any inconvenience caused to its customers and promised to investigate the extent of the impact.

The attack has forced Askul to suspend all key operations, including online and fax orders, shipping, new user registration, returns, catalog requests, and pharmaceutical services. Customer support lines and inquiry forms have also been made unavailable. At this time, no ransomware gangs have claimed responsibility for the attack on Askul.

This is not the first time a major Japanese company has fallen victim to a ransomware attack. Asahi Group Holdings, Ltd, Japan's largest brewing company, disclosed a similar incident at the end of September. The company suspended its operations at the Japanese branch after a cyber attack and did not reveal the name of the group responsible for the security breach.

However, it is believed that Qilin ransomware claimed responsibility for the attack on Asahi. In a statement, Qilin leaked 27GB of stolen data, including employee and financial documents. This has raised concerns about the potential impact on both companies' operations and reputation.

The incident highlights the growing threat of ransomware attacks in Japan and the need for companies to prioritize cybersecurity measures. As Muji and Askul work to resolve the issue, customers can only wait and see when they will be able to shop as usual.

Background on Muji

Muji is a Japanese retailer known for its minimalist design and "no-brand" philosophy. The company sells a wide range of products, including clothing, furniture, stationery, and home goods, all emphasizing simplicity, functionality, and sustainability. The name "Muji" comes from "Mujirushi Ryohin," meaning "no-brand quality goods."

The company has over 24,500 employees and $4 billion in annual revenue, making it one of the largest retailers in Japan. Muji's online store is a significant part of its operations, with millions of customers shopping from around the world every day.

Background on Askul

Askul is a logistics partner for many Japanese companies, including Muji. The company provides a range of services, including warehousing, shipping, and inventory management.

Askul's website has been experiencing technical issues since the ransomware attack, leaving customers unable to track their shipments or access their account information. The company has apologized for any inconvenience caused and promised to investigate the extent of the impact.

Conclusion

The ransomware attack on Askul has had a significant impact on Muji's operations, forcing the retailer to suspend online sales. As both companies work to resolve the issue, customers can only wait and see when they will be able to shop as usual.

This incident highlights the growing threat of ransomware attacks in Japan and the need for companies to prioritize cybersecurity measures. With the rise of remote work and online shopping, cybersecurity is becoming increasingly important for businesses around the world.