7.7 million customers may have had personal information exposed after Japanese electronics giant Iris Ohyama discovered attackers may have accessed data stored on a third‑party cloud service used by its Iris Plaza online store, the company disclosed.
Iris Ohyama's discovery and immediate response
Iris Ohyama first disclosed the incident on October 29, one day after finding a suspicious file on a third‑party cloud service tied to its Iris Plaza ecommerce operation. Iris Plaza immediately suspended its website and associated systems and began an internal investigation; the company subsequently confirmed unauthorized access to the cloud environment. The site remains offline and the company has not said when it will be restored.
Scope and nature of the exposed records
The company says the potentially compromised cloud environment contained personal information for about 7.7 million people. That total breaks down to roughly 5.8 million registered customers — including former members — and another 1.9 million people who purchased without creating an account or who participated in promotional campaigns. Iris Ohyama told customers that the specific items at risk vary between records and that the dataset potentially included names, addresses, phone numbers, email addresses, dates of birth, gender, and passwords.
The cyber insurance questionnaire just landed. Now what?
SOC 2, HIPAA, insurance renewals - someone has to own security strategy. Nubivance provides fractional CISO leadership without the full-time salary.
Get a security leadEncryption, payment data, and unknowns
Some of the exposed data, including passwords, was encrypted, but Iris Ohyama has not explained what protection was used. The company also says it did not store payment information in the affected cloud service and that the payment data has not been compromised. It remains unclear whether attackers actually exfiltrated any of the 7.7 million records; Iris Plaza says it is still investigating the possibility of a data leak and has yet to establish the full extent of the intrusion. The company has not identified the cloud provider involved or explained how attackers gained access.
Operational impact on customers and sales channels
With Iris Plaza's website and systems suspended, shoppers cannot place orders through the retailer's primary online storefront, and existing orders are taking longer to ship. Customers attempting to cancel purchases have been told they may need to refuse delivery if a parcel arrives before the cancellation is processed. Iris Ohyama said that alternative storefronts — Iris Plaza stores on Rakuten, Yahoo! Shopping, and auPAY Market — were still operating and that it had found no evidence those stores were affected.
What this means for customers, Japanese authorities, and marketplace partners
- Customers: Iris Ohyama says it will contact potentially affected customers individually and has warned shoppers to watch for phishing emails, fraudulent calls, and fake websites impersonating the retailer. The company advised customers who reused their Iris Plaza passwords elsewhere to change them.
- Japanese authorities: Iris Ohyama reported the incident to Japanese authorities, initiating official notification and, presumably, any regulatory or law‑enforcement review linked to the reported breach.
- Third‑party marketplaces and partners: Iris Ohyama emphasized that Rakuten, Yahoo! Shopping, and auPAY Market storefronts were operating and that it had found no evidence of compromise at those channels — an important operational distinction while the Iris Plaza site remains suspended and under investigation.
The intrusion has left several key facts unresolved: whether data was actually removed from the cloud environment, which cloud provider hosted the affected data, how the attackers gained access, and when Iris Plaza's primary site will be restored. For now, the company is continuing its investigation, notifying individuals it believes may be affected, and cautioning customers about follow‑on fraud risks while some storefronts remain live on third‑party marketplaces.
