Iris Ohyama pulls online store after cloud breach risks 7.7M records
Original title: Japanese homeware giant pulls online store after cloud breach puts 7.7M records at risk
The company exposed personal data of 7.7 million customers, including passwords for some.
Japanese retailer Iris Ohyama discovered unauthorized access to a third-party cloud service used by its Iris Plaza ecommerce site on October 29, affecting approximately 7.7 million customers. The exposed data includes names, addresses, phone numbers, email addresses, dates of birth, gender, and passwords. The company has suspended its website and is investigating while advising customers to change reused passwords.
Unconfirmed: Whether any data was actually exfiltrated or used remains unknown.
- Exposed data: names, addresses, phone numbers, email addresses, dates of birth, gender, and passwords
- 5.8 million registered customers and 1.9 million non-registered affected
- Website still down with no reopening date
- No payment information compromised
Impact: Personal information and encrypted passwords of 7.7 million customers potentially exposed
- 1.Change passwords used on Iris Plaza
- 2.Watch for phishing impersonating the retailer
- Vendors
- Iris Ohyama
- Products
- Iris Plaza
- Victims
- customers
- Countries
- Japan
From the original article
2 min read at theregister.comNo reopening date as orders face delays and some customers are told to refuse deliveries to cancel purchases
By Carly Page · theregister.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.