All Breaches
October 19, 2025 Verified E-Commerce

ASKUL (LOHACO) Data Breach

Japanese business-to-business office supply and consumer e-commerce operator ASKUL Corporation, which runs both the ASKUL corporate platform and the LOHACO retail site, confirmed following an extensive forensic investigation that a ransomware attack initiated on October 19, 2025, resulted in the exfiltration of approximately 740,000 customer, corporate client, and supplier records.

740 Thousand
Reported Records
6
Data Types
High
Severity
Oct 30, 2026
Last updated

Protect Yourself

Check whether you were affected by this breach

Check my email

Exposed Data Types

6
  • Names
  • Email addresses
  • Physical addresses
  • Phone numbers
  • Employers
  • Purchase histories

About This Breach

Claimed by the RansomHouse extortion group, the breach exposed full names, company and department names, postal addresses, telephone numbers, email addresses, order histories, and customer inquiry records across ASKUL and LOHACO, while credit card payment data remained unaffected.

Verification and editorial method

LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.

Report missing or incorrect information