Askul: ransomware attack

Ransomware detected on October 19 halted ordering and shipping, affecting MUJI and Loft online stores. A contractor's administrator account without MFA was abused; RansomHouse claimed responsibility. December's confirmed leaked categories were separately reported as about 590,000 business-customer, 132,000 consumer-customer, 15,000 business-partner and 2,700 officer/employee records. Askul reported no ransom negotiations or payment. On January 21, 2026 it reported availability of all ASKUL products and full restoration of LOHACO. On 30 July 2026 it identified about 600,000 more personal records (names, addresses, phone numbers and emails) that may have leaked; actual leakage or misuse of this additional group was unconfirmed, and this was not a new intrusion. On 16 July it had received administrative guidance from the Personal Information Protection Commission. On February 13, 2026 it reported major EC functions restored to pre-incident levels, with some exceptions.