Japanese online shopping platform Iris Plaza has been breached, potentially exposing the personal data of 7.7 million individuals. The hackers may have accessed names, addresses, phone numbers, email addresses, dates of birth, gender information, and encrypted passwords for current and former members, as well as non-members who made purchases without registering on the platform.
Iris Ohyama, the household products and appliance manufacturer that operates Iris Plaza, discovered the breach on October 28. The company immediately took action to mitigate the damage by suspending the platform, disconnecting related systems, and launching an investigation into the attack. External experts have been retained to aid in the investigation, and law enforcement has been notified.
The compromised data does not include credit card information, as Iris Ohyama’s external cloud service does not store this type of sensitive financial information. Despite the potential breach, there have been no reported instances of unauthorized use or financial damage resulting from the incident, according to an automated translation of the company’s incident FAQ.
The affected individuals are being notified, and Iris Ohyama has taken steps to block the attackers’ access to the service. The platform remains offline while the investigation continues and necessary remediation measures are applied. Additionally, the manufacturer has suspended its home fashion specialty store Simple Style, as well as its home appliance subscription and delivery services, out of caution.
This incident serves as a reminder that even large companies can be vulnerable to cyber attacks. Iris Ohyama’s swift response to the breach is commendable, but it also highlights the importance of robust cybersecurity measures in preventing such incidents from occurring in the first place.
For individuals who may have been affected by this breach, it is essential to remain vigilant and monitor their accounts for any suspicious activity. It is also crucial to keep passwords secure and to use two-factor authentication whenever possible. Furthermore, if you are a current or former member of Iris Plaza, be sure to check your email for notifications from the company regarding this incident.
In conclusion, the breach of Iris Plaza’s online shopping platform serves as a timely reminder of the importance of prioritizing cybersecurity in today’s digital age. By staying informed and taking proactive measures to protect ourselves, we can reduce our risk of being affected by such incidents in the future.
Source: SecurityWeek — 2026-11-09