Iris Ohyama cloud breach may expose data of 7.7 million customers

· Cybersecurity · Japan

Japanese manufacturer Iris Ohyama, which operates the Iris Plaza shopping platform, disclosed that personal information belonging to about 7.7 million people may have been exposed after unauthorized access to a third-party cloud service the company uses. According to SecurityWeek, hackers compromised an external cloud service used by the shopping platform and may have stolen personal information from it. The company did not immediately detail which categories of data were affected in the reports. The case adds to a run of breaches traced to third-party service providers rather than a company's own systems.

Why it matters：The scale of the exposure again shows how a compromise at a single cloud vendor can expose customer data at consumer-facing companies, keeping third-party risk management central to security programs.

Key points

  • About 7.7 million people may be affected.
  • The breach stemmed from unauthorized access to a third-party cloud service.
  • Iris Plaza is the shopping platform run by Iris Ohyama.

Sources (original reporting)

More stories from this day