Iris Plaza cloud breach may expose data of 7.7 million people
Original title: Iris Ohyama data breach may expose personal information of 7.7 million people
About 5.8 million members and 1.9 million non-members may be affected; card data was not in the cloud store.
Japanese household-goods maker Iris Ohyama said attackers may have accessed personal information of about 7.7 million people through an external cloud service used by online-shopping subsidiary Iris Plaza. Iris Plaza found a suspicious file on October 28, shut down its shopping platform, and later said stored data may have been viewed or obtained. Possible data includes names, addresses, phone numbers, emails, and for members gender, dates of birth and some encrypted passwords. Credit cards were not stored there. The company notified police and Japan's Personal Information Protection Commission on October 29 and warned of follow-up phishing.
Unconfirmed: The company says data may have been viewed or obtained; theft is not confirmed.
- The 7.7 million figure is records stored, not confirmed stolen data.
- As of November 5 the company reported no confirmed fraud or financial loss.
- Customers who reused Iris Plaza passwords elsewhere are asked to change them.
- Iris Plaza says it will not ask for passwords, PINs or authentication codes.
- Related group sites were suspended; the company says it found no evidence they were compromised.
Impact: Possible exposure of names, contact details and some passwords
- 1.Change Iris Plaza passwords reused on other services.
- 2.Ignore messages asking for passwords, PINs or authentication codes.
- Products
- Iris Plaza
- Victims
- Iris OhyamaIris Plaza
- Organizations
- Personal Information Protection Commission
- Countries
- Japan
From the original article
3 min read at securityaffairs.com
Iris Ohyama warns that a cloud data breach may have exposed personal information of 7. 7 million customers, including names and passwords. Japanese household goods manufacturer Iris Ohyama has disclosed that attackers may have accessed personal information belonging to approximately 7.
By Pierluigi Paganini · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.