Iris Ohyama Data Cloud Breach Exposes Info Of 7 7 Million Customers

www.itsecuritynews.info • November 8, 2026

Japanese manufacturer Iris Ohyama, the operator of the Iris Plaza shopping platform, disclosed that personal information belonging to 7.7 million people may have been exposed after unauthorized access to a third-party cloud service the company used. […]

This article has been indexed from BleepingComputer

Iris Ohyama data cloud breach exposes info of 7.7 million customers

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Iris Ohyama Data Breach Affects 7.7 Million Customers Iris Ohyama disclosed a data breach involving its Iris Plaza online shopping platform, potentially exposing personal information of 7.7 million individuals. The breach was linked to unauthorized access to a third-party cloud service, discovered on October 28, 2026. Affected individuals include approximately 5.8 million registered members and 1.9 million non-members. The compromised data may include names, addresses, phone numbers, email addresses, gender, dates of birth, and encrypted passwords, while credit card information was not stored in the affected service. The company suspended the Iris Plaza site and related systems immediately after the breach was detected and reported the incident to Japan's Personal Information Protection Commission and local police on October 29. As of November 5, there have been no reports of misuse or financial loss related to the exposed information. The investigation is ongoing, and the company has not yet identified the attacker or the method of access. 4 sources 52

Extracted Entities

Iris Ohyama Data Cloud Breach Exposes Info Of 7 7 Million Customers

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Countries (1)