Askul corporation restores operations after ransomware attack and data breach

As outlined in The Cyber Express, Japanese supplier Askul Corporation is making significant strides in restoring its core logistics operations following a severe ransomware incident that began on October 19, 2025. The cyberattack not only paralyzed the company's systems but also led to the confirmed exposure of a substantial amount of sensitive personal and business data.

The Askul cyberattack, attributed to the RansomHouse extortion group, forced the company to suspend nearly all online services and halt order intake and shipping operations across its ASKUL, Soloel Arena, and LOHACO platforms. Initial recovery efforts involved accepting limited orders via fax and prioritizing essential items. The company has since begun restoring system-based shipment operations at two logistics centers in Tokyo and Saitama Prefecture, with eight additional hubs slated for gradual reopening after safety assessments. Beyond operational disruption, the breach resulted in the theft of approximately 740,000 records, including business customer service records, individual customer data, and information pertaining to business partners and employees. Askul confirmed that attackers likely gained initial access through stolen credentials from an outsourced partner's administrative account lacking multi-factor authentication, subsequently deploying multiple ransomware variants.

In response to the incident, Askul is implementing sweeping security reforms aligned with the NIST Cybersecurity Framework, including mandatory multi-factor authentication and enhanced security monitoring. The company is also rebuilding its security governance framework by May 2026.

Source: The Cyber Express