Iris Ohyama data breach may have exposed records of 7.7 million people
Customers of Iris Plaza and related services now face a higher risk of phishing and unwanted contact, though no misuse has been reported so far.
Japanese household goods maker Iris Ohyama says personal data on roughly 7.7 million people may have been exposed through a third-party cloud service used by its Iris Plaza online store. About 5.8 million registered and former members and 1.9 million non-members are potentially affected, with exposed fields including names, addresses, phone numbers, email addresses and, for some members, encrypted passwords, while the company says no card data was held in that service. The company has taken Iris Plaza offline, along with its Simple Style store and related subscription and delivery services, and has informed regulators and police. As of early November it reported no misuse of the data or resulting financial loss, and the investigation into the cause and the full count of records is still ongoing.
Why it matters
The incident shows how a single third-party cloud service can expose personal data far beyond the company that owns the customer relationship. Members whose passwords were stored in encrypted form may need to change them, and anyone whose contact details were exposed may see more scam messages than before. Because the investigation into the cause and the full record count is still open, the total affected could change.
Matters or hype?
Does this story matter, or is it hype? Vote before you see what everyone else said.