The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Muji’s Japanese online store stopped accepting orders and shipping at 9 p.m. Japan time on October 19, 2025, after ransomware disrupted systems operated by ASKUL LOGIST, an Askul logistics subsidiary that handled online-store fulfillment. Muji said its own systems were not infected, while physical stores and overseas operations continued normally. The store later returned in stages, with all-product ordering and shipping reported as resumed on December 12, 2025.
The incident later became a customer-privacy issue. Muji said delivery data supplied to ASKUL LOGIST might have been exposed, and Askul said on July 30, 2026 that approximately 600,000 additional records had been identified where external leakage could not be ruled out. Neither notice established that all those records were leaked or misused.
What happened to Muji’s online store?
The immediate event was an availability outage caused by a ransomware-related system failure at Askul and its logistics operation, not a confirmed ransomware infection of Muji’s corporate network. Muji relied on ASKUL LOGIST to process and deliver Japanese online-store orders, so the logistics failure prevented Muji from accepting new orders and shipping existing ones.
Muji’s first public notice, dated October 20, 2025, said the suspension began at 9 p.m. Japan time on October 19. The notice described the affected operation as the Japanese online store and related digital services. It did not report a worldwide Muji shutdown or closure of ordinary physical stores. Muji’s October 20 notice
#1 Best Overall
- New and improved stackable versatile box with five pull out drawers
- Used to store make-up, stationery, haberdashery items or jewellery
- Durable and protective storage and stackable box
- Made of sturdy, environment friendly material
- Number of layer when stacking: 2 layers
Incident timeline
| Date | What was reported |
|---|---|
| October 19, 2025 | At 9 p.m. Japan time, Muji suspended Japanese online-store ordering and shipping after the Askul logistics disruption. |
| October 20, 2025 | Muji explained the outage, said its own systems had not been infected with ransomware, and described affected app and subscription features. |
| November 14, 2025 | Muji said delivery information provided to ASKUL LOGIST might have flowed outside the affected environment. |
| December 1, 2025 | Some ordering and shipping resumed, including specified furniture, direct-from-producer products and monthly-subscription applications. Muji’s partial-recovery notice |
| December 12, 2025 | Muji’s related updates identified the resumption of ordering and shipping for all products. |
| July 30, 2026 | Askul said approximately 600,000 additional records had been identified where external leakage could not be ruled out. |
| August 18, 2026 | The online-store outage is historical; privacy and incident follow-up remain separate questions. |
Which Muji services were affected?
The disruption reached beyond a storefront error because ordering depended on fulfillment and delivery systems. Muji’s notice listed these affected functions:
- The Japanese Muji online store, including browsing and purchases.
- Online-store order acceptance and shipping.
- Order-history viewing in the MUJI app.
- Some web content displayed through the app.
- Applications for monthly subscription services.
- Some store services connected with large-furniture orders and collection.
Muji said ordinary physical-store operations and store logistics were not affected by the initial incident. The reported suspension also concerned Japan; it was not evidence that Muji stores or websites in the United States, Europe, Australia or every other market were offline. Contemporaneous secondary reporting
Was Muji itself hacked?
There is no confirmed evidence in the cited official notices that Muji’s own systems were infected. Muji explicitly said it had not been infected with ransomware. The more accurate description is that Muji’s Japanese e-commerce operation was disrupted when ransomware hit a critical logistics provider.
Rank #2
- Size (W x D x H): Approx. 9.9 x 6.7 x 5.0 inches (25.2 x 17
- Core Material: MDF Surface: Oak veneer
- Country of Origin: China
- Brand: Muji
That distinction matters. The documented facts establish dependency-related operational impact, but they do not establish that attackers entered Muji through Askul, deliberately conducted a software supply-chain compromise, or compromised Muji’s corporate network.
What happened to orders placed before the outage?
Muji said it was checking which pre-incident orders could still be shipped, determining how to process affected orders and contacting customers by email where necessary. Consequently, an order placed before October 19 could be delayed even if payment had already been completed.
The public notices do not establish one universal cancellation, refund or delivery deadline. Customers should rely on an individual notice from Muji and verify account information through the official site or app rather than assuming that every order followed the same path.
Rank #3
- Core material: MDF, veneer: oak wood
- Approx. Width 10.0 x Depth 6.7 x Height 3.3 inches (25.2 x 17
- Country of Origin: China
- Shape: Rectangle
When did online sales resume?
Recovery was staged instead of instantaneous. Muji reported a partial restart on December 1, 2025, covering specified product categories and subscription applications. Its related official updates identified December 12, 2025 as the date all-product ordering and shipping resumed. Restoration of ordering did not, by itself, mean that every forensic or privacy question had been closed.
Could customer data have been exposed?
Muji’s November 14, 2025 notice said information supplied to ASKUL LOGIST for delivery might have been exposed outside the affected environment. The potentially involved fields were:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
- Customer name
- Delivery address
- Telephone number
- Ordered-product information
Muji said credit-card information was not included in the data set described in that notice and said no misuse had been confirmed at that point. Muji’s November 14 data-exposure notice
Rank #4
- Core Material: MDF, Veneer Plate: Oak
- Approx. W 3.3 x D 6.7 x H 9.9 inches (W 8.4 x D 17
- Country of Origin: China
- Shape: Trapezoid
- Brand: Muji
On July 30, 2026, Askul announced approximately 600,000 additional records for which external leakage could not be ruled out. Askul said those records contained names, addresses, telephone numbers and email addresses, and that it had identified no confirmed external leakage or misuse of the newly identified records as of that announcement. The figure is a number of records identified by Askul, not proof that 600,000 Muji customers were breached. Askul’s July 30, 2026 notice
“Leakage cannot be ruled out” is not the same as confirmed publication or misuse, but it also is not proof that information was safe. Names, addresses, phone numbers and purchase details can make impersonation, phishing emails, scam calls and targeted social-engineering attempts appear credible even when payment-card data is absent.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What affected customers should do now
- Be skeptical of unexpected contact. Treat emails, texts and calls claiming to be from Muji, Askul or a public agency with caution, especially when they mention an address or recent purchase.
- Do not use message links. Avoid clicking links or opening attachments in suspicious messages.
- Check independently. Type the official Muji or Askul address yourself or use the company’s official app to review orders and account activity.
- Confirm support channels. If you need help, use contact details published on the official company website, not a phone number or URL supplied in an unexpected message.
- Report convincing impersonation. Preserve the message and report it through the relevant official channel if it requests payment, passwords, one-time codes or other sensitive information.
Askul specifically warned about impersonation and phishing, including messages pretending to come from Askul or government agencies. Askul’s customer warning
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Best Value
- Set of 10 Trays -2 big tray, 2 middle tray and 6 small trays. Offer a lot of combinations to fit different drawers, great for storage of miscellaneous objects.
- Desk Drawer Organizer - No more clutter and stress when you open your drawers. The drawer trays will help you manage your drawer space fast practical and easy.
- Multifunctional - Not only a drawer organizer but also a desktop organizer, perfect for storing cosmetic, make up tools, office supplies etc.
- Material - Made of translucent plastic(PP), BPA-free and unbreakable. Translucent frosted design makes it easy to see and find each item quickly.
- Easy to Care, long-lasting plastic and rounded corners design make the drawer trays easy to wipe clean (or hand-wash with soap and water).
Why a logistics outage can stop a retailer’s online sales
A retailer can have an available website and uncompromised internal network yet be unable to accept or fulfill orders if a logistics partner’s systems coordinate inventory, order processing, warehouse work and delivery data. Muji’s experience illustrates operational concentration risk: the dependency was enough to halt a national online channel even though Muji said its own network was not infected.
The incident also shows why availability and confidentiality must be tracked separately. The first public harm was inability to browse, order and ship. The possible exposure of delivery information emerged weeks later, and additional records were identified months after service restoration.
Quick Recap
What retailers and logistics partners should learn
- Map critical dependencies: identify which suppliers control ordering, fulfillment, customer support and order-history access.
- Test alternate fulfillment: maintain a realistic fallback for accepting orders, allocating stock and communicating delays when a primary provider is offline.
- Prepare offline customer support: preserve ways to verify purchases and answer delivery questions when app histories or support systems are unavailable.
- Use joint incident plans: define notification responsibilities, evidence preservation and customer messaging across retailer and logistics-provider teams.
- Minimize shared data: limit the delivery and purchase information a logistics provider receives and segregate it where practical.
- Test recovery by category: staged restoration may be necessary, so businesses should know which products and services can return first and how customers will be told.
Current status as of August 18, 2026
- Japanese online store: ordering and shipping were reported fully resumed on December 12, 2025.
- Physical stores: ordinary store operations were reported as continuing during the initial outage.
- International operations: the cited initial suspension concerned Japan, not a global Muji shutdown.
- Customer information: Muji reported possible exposure of delivery and order details; Askul later identified about 600,000 additional records where leakage could not be ruled out.
- Confirmed misuse: Askul reported no confirmed leakage or misuse for those additional records as of July 30, 2026.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
