Iris Ohyama says personal information linked to about 7.7 million people may have been exposed after unauthorized access to a third-party cloud service used by its Iris Plaza online store.
The company has not confirmed how many people were affected or how many records were actually accessed, according to its November 5 notice, which BleepingComputer reported on November 8.
The potentially exposed data covers about 5.8 million registered and former members, along with about 1.9 million non-members who bought products without creating accounts or entered campaigns. Depending on the person, the information may include names, addresses, phone numbers, email addresses, gender, dates of birth and passwords. The company said some of the affected information, including passwords, was encrypted; former members’ passwords were excluded from the affected data. It cautioned that the same information was not exposed for everyone.
Iris Plaza said it found suspicious files in the external cloud service on October 28 and confirmed unauthorized access by a third party. It suspended the online store and related systems while investigating, then disclosed the incident on October 29. Credit card information was not stored in the affected cloud service, and the company said no misuse or financial losses linked to the incident had been reported as of November 5.
The company reported the incident to Japan’s Personal Information Protection Commission and police on October 29. It is contacting people whose information may have been exposed by email as the investigation progresses. Iris Ohyama also suspended its SIMPLE STYLE store and related home-appliance subscription and delivery websites, but said it had not confirmed unauthorized access or data leaks at those separate services. BleepingComputer said the company told it that it had received no direct communication from the attacker and had not identified the perpetrators.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
