Iris Ohyama's Iris Plaza store breach may expose data on 7.7 million people
Iris Plaza online store (Iris Ohyama Group)
Sponsored
Brought to you byTinkerer Club
The private club for people who own their servers, run their own AI, and pay $0/month for software.
Iris Plaza, which runs the official online store of Japanese manufacturer Iris Ohyama, found a suspicious file in an external cloud service it uses on Oct 28 2026, confirmed unauthorized access by a third party and took the store and related sites offline. Its Nov 5 update says the customer data kept in that cloud service may have been viewed or taken: about 5.8 million members and former members (names, addresses, phone numbers, emails, gender, encrypted passwords, birth dates and more; no passwords for former members) and about 1.9 million non-member buyers and campaign entrants (names, addresses, phone numbers, emails). Credit card data was not stored there. The actual number of people affected is still under investigation, and no misuse had been reported as of Nov 5.
Why this severity: About 7.7 million people's contact details, including encrypted account passwords and birth dates for members; the cloud service and the access method have not been disclosed
- Started
- Oct 28, 2026
Affected
Not published yet
Fixed in
No fixed release yet
Timeline4
A spokesperson tells BleepingComputer the company has received no direct communication from the attacker and has not identified the perpetrators.
Second notice: data stored in the external cloud service may have been viewed or taken, covering about 7.7 million people: about 5.8 million members and former members (name, address, phone, email, gender, encrypted password, birth date and more) and about 1.9 million non-members (name, address, phone, email). Card data was not stored there. The actual number affected is still being investigated and individual emails start going out.
First notice: Iris Plaza confirms unauthorized access to its e-commerce site, keeps the site suspended and says no credit card leak has been found. It reports the incident to the police and Japan's Personal Information Protection Commission.
Iris Plaza finds a suspicious file in an external cloud service it uses, immediately stops the Iris Plaza online store and related systems, and cuts off the unauthorized access route. The SIMPLE STYLE store and Iris Tech Service sites (appliance subscriptions, furniture and appliance delivery) are taken offline the same day as a precaution.
Advisories2
News & write-ups3
Posts1
Iris Ohyama data cloud breach exposes info of 7.7 million customers t.co/WjDa0CY5sv t.co/WjDa0CY5sv
Notes & caveats
Iris Plaza has not named the external cloud service or said how the attacker got in, and it has not said which scheme protects the stored passwords. Its stores on outside marketplaces (Rakuten, Yahoo! and au PAY Market) are not affected according to the company. The Iris Plaza site stays down until the cause is found and fixes are in place.
Get an email when a new major security incident drops. No spam, unsubscribe any time.
