GoKawiilIris Ohyama cloud breach may expose data of 7.7 million Iris Plaza customers
Iris Ohyama disclosed that unauthorized access to a third-party cloud service used by its Iris Plaza online store may have exposed personal data belonging to roughly 7.7 million people, including 5.8 million current and former members and 1.9 million non-members. The company found a suspicious file in the cloud service last month, suspended Iris Plaza and related systems, and confirmed unauthorized third-party access in an October 29 notice, with an update this week providing more detail.
GoKawiil's interpretation of the reporting above, not reported fact.
The breach highlights how reliance on third-party cloud providers can expose large consumer datasets even when a company's own systems aren't directly compromised. Exposed data such as names, addresses, phone numbers and encrypted passwords could enable phishing or account-takeover attempts against millions of customers, though Iris Ohyama says credit card data was not stored in the affected system and no misuse has yet been reported.
- About 7.7 million Iris Plaza customers' data may have been exposed via a third-party cloud breach.
- Exposed information can include names, addresses, phone numbers, emails, birth dates and encrypted passwords, varying by individual.
- Credit card data was not stored in the compromised service, and no misuse had been reported as of November 5.
YubiKey 5C NFC Security Key — Breaches like this one highlight why password-only logins are risky for both companies and consumers. A hardware security key like the YubiKey adds a strong second factor to your accounts, so even if a service you use gets breached, your personal accounts stay protected. It's a simple, one-time purchase that meaningfully boosts your account security across many platforms.
See YubiKey 5C NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-11-08
Published there as: “Iris Ohyama data cloud breach exposes info of 7.7 million customers”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.