An investigation into unauthorized access to an external cloud service found that Iris Plaza customer information may have been exposed; the company is still determining how many people were affected.
Iris Ohyama says personal information belonging to up to 7.7 million Iris Plaza customers may have been exposed after unauthorized access to an external cloud service. The company has not confirmed how many records were exposed or how many people were affected.
The Japanese household-products manufacturer’s online storefront first disclosed the unauthorized access on 29 October, after discovering a suspicious file in the external cloud service used by Iris Plaza and immediately suspending the platform and related systems. Its investigation update identified up to 5.8 million registered and former members and 1.9 million non-members as potentially affected.
Iris Plaza said the information potentially exposed varies by person and includes full names, addresses, phone numbers, email addresses, gender, dates of birth and account passwords. Active members' passwords were stored in encrypted form, but the company did not specify the encryption method. Former members' passwords and credit-card information were not stored in the affected cloud service.
As of 5 November, Iris Plaza had received no reports of misuse of the information or financial loss linked to the incident.
BleepingComputer said the company’s SIMPLE STYLE online store and related systems were suspended on 28 October, as were Iris Tech Service websites for services including home-appliance subscriptions and furniture and appliance delivery and installation. Japan’s Personal Information Protection Commission and police were notified on 29 October.
An Iris Plaza spokesperson told BleepingComputer that the company had received no direct communication from the attacker and had not identified the perpetrators. The investigation into the extent of the exposure continues.
The reported purchase covers 1.7 gigawatts of gas-fired generators from OnePWR Solutions. Reuters could not immediately verify the deal, and neither company responded to its requests for comment.
1 min
The delivery award for PROMISE includes a $140 million performance-based option. NASA also issued six transportation task orders totaling approximately $1.3 billion, assigning rides and orbital transport for lunar missions.
3 min
The Chinese firm is on a list of companies approved to handle H200 chips, the Times says. Its owners have ties to a private equity firm blacklisted by the US since 2024.
1 min
