What: Muji suspended its online sales in Japan after a ransomware attack on its logistics partner Askul disrupted operations and customer services.

Why it is important: The disruption demonstrates how third-party breaches can rapidly escalate into major operational and reputational risks for retailers, as seen in recent sector analyses.

Muji, the Japanese retail giant known for its minimalist household goods, clothing, and furniture, was forced to suspend its online sales in Japan following a ransomware attack on its logistics partner, Askul. The incident caused a complete halt to Muji’s digital retail operations, affecting not only online purchases but also customer access to order histories and certain web content. While Muji’s physical stores and international operations remained unaffected, the company faced the challenge of identifying impacted shipments and communicating transparently with customers about potential data breaches. Askul, a major logistics and office supplies company owned by Yahoo! Japan Corporation, also suspended its services and began investigating the scope of the attack, including possible data leaks. This event underscores the profound operational vulnerabilities that arise when supply chain partners are targeted, highlighting the need for robust cybersecurity measures and contingency planning in the retail sector.

IADS Notes: The ransomware attack on Muji’s logistics partner Askul closely mirrors recent sector disruptions. In December 2024, a ransomware incident at Blue Yonder disrupted supply chains for thousands of retailers worldwide. RH-ISAC’s April 2025 report revealed that 41% of retail cyber incidents stem from supply chain breaches, with average losses of $1.4 million per attack. The September 2025 Co-op attack and the May 2025 breaches at M&S and Harrods further illustrate the sector’s acute vulnerability to third-party risks and the necessity for rapid recovery protocols and transparent customer communication.

Retail giant Muji halts online sales after ransomware attack on supplier