700,000 Records Compromised in Askul Ransomware Attack

The SecurityWeek article reports that Askul, a Japanese e-commerce and logistics company, disclosed that a recent data breach from a ransomware attack compromised over 700,000 records, following an October incident in which files were encrypted after attackers stole sensitive information. The RansomHouse group claimed responsibility, leaking data on November 10 and December 2, with the criminals saying they had stolen more than 1 TB of data.

According to Askul, the incident disrupted orders and shipping, and the company’s highly automated logistics systems were shut down during the breach, with many services only resuming in early December. The breach affected customer and business partner information: roughly 590,000 customer records related to business services and 132,000 related to consumer services were compromised, along with thousands of records for business partners, employees, and Askul executives.

Investigators found that access was gained via compromised credentials, followed by reconnaissance, credential harvesting, lateral movement, and the deletion of backups before file-encryption malware was deployed. Written by Eduard Kovacs, the piece was published on 16 December 2025. According to Askul, the attack caused significant disruptions to operations.