{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Iris Ohyama's Iris Plaza store breach may expose data on 7.7 million people · updates",
  "home_page_url": "https://pwn.watch/i/iris-ohyama-iris-plaza-cloud-breach-7-7m-nov-2026",
  "feed_url": "https://pwn.watch/i/iris-ohyama-iris-plaza-cloud-breach-7-7m-nov-2026/feed.json",
  "description": "Iris Plaza, which runs the official online store of Japanese manufacturer Iris Ohyama, found a suspicious file in an external cloud service it uses on Oct 28 2026, confirmed unauthorized access by a third party and took the store and related sites offline. Its Nov 5 update says the customer data kept in that cloud service may have been viewed or taken: about 5.8 million members and former members (names, addresses, phone numbers, emails, gender, encrypted passwords, birth dates and more; no passwords for former members) and about 1.9 million non-member buyers and campaign entrants (names, addresses, phone numbers, emails). Credit card data was not stored there. The actual number of people affected is still under investigation, and no misuse had been reported as of Nov 5.",
  "language": "en",
  "_pwn": {
    "slug": "iris-ohyama-iris-plaza-cloud-breach-7-7m-nov-2026",
    "severity": "high",
    "status": "live",
    "patchStatus": "partial",
    "rss": "https://pwn.watch/i/iris-ohyama-iris-plaza-cloud-breach-7-7m-nov-2026/feed.xml",
    "llms": "https://pwn.watch/i/iris-ohyama-iris-plaza-cloud-breach-7-7m-nov-2026/llms.txt",
    "json": "https://pwn.watch/i/iris-ohyama-iris-plaza-cloud-breach-7-7m-nov-2026.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/iris-ohyama-iris-plaza-cloud-breach-7-7m-nov-2026#2026-11-08-d0b7e375",
      "url": "https://pwn.watch/i/iris-ohyama-iris-plaza-cloud-breach-7-7m-nov-2026#2026-11-08-d0b7e375",
      "title": "Iris Ohyama's Iris Plaza store breach may expose data on 7.7 million people: A spokesperson tells BleepingComputer the company has received no direct communication from the attacker and has not identified the perpetrators.",
      "content_text": "Iris Ohyama's Iris Plaza store breach may expose data on 7.7 million people: A spokesperson tells BleepingComputer the company has received no direct communication from the attacker and has not identified the perpetrators.\n\nSource: https://www.bleepingcomputer.com/news/security/iris-ohyama-data-cloud-breach-exposes-info-of-77-million-customers/",
      "date_published": "2026-11-08T00:00:00.000Z",
      "external_url": "https://www.bleepingcomputer.com/news/security/iris-ohyama-data-cloud-breach-exposes-info-of-77-million-customers/",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/iris-ohyama-iris-plaza-cloud-breach-7-7m-nov-2026#2026-11-05-1babd1f0",
      "url": "https://pwn.watch/i/iris-ohyama-iris-plaza-cloud-breach-7-7m-nov-2026#2026-11-05-1babd1f0",
      "title": "Iris Ohyama's Iris Plaza store breach may expose data on 7.7 million people: Second notice: data stored in the external cloud service may have been viewed or taken, covering about 7.7 million people: about 5.8 million members and former members (name, address, phone, email, gender, encrypted password, birth date and more) and about 1.9 million non-members (name, address, phone, email). Card data was not stored there. The actual number affected is still being investigated and individual emails start going out.",
      "content_text": "Iris Ohyama's Iris Plaza store breach may expose data on 7.7 million people: Second notice: data stored in the external cloud service may have been viewed or taken, covering about 7.7 million people: about 5.8 million members and former members (name, address, phone, email, gender, encrypted password, birth date and more) and about 1.9 million non-members (name, address, phone, email). Card data was not stored there. The actual number affected is still being investigated and individual emails start going out.\n\nSource: https://www.irisohyama.co.jp/news/2026/?date=1105",
      "date_published": "2026-11-05T00:00:00.000Z",
      "external_url": "https://www.irisohyama.co.jp/news/2026/?date=1105",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/iris-ohyama-iris-plaza-cloud-breach-7-7m-nov-2026#2026-10-29-98796409",
      "url": "https://pwn.watch/i/iris-ohyama-iris-plaza-cloud-breach-7-7m-nov-2026#2026-10-29-98796409",
      "title": "Iris Ohyama's Iris Plaza store breach may expose data on 7.7 million people: First notice: Iris Plaza confirms unauthorized access to its e-commerce site, keeps the site suspended and says no credit card leak has been found. It reports the incident to the police and Japan's Personal Information Protection Commission.",
      "content_text": "Iris Ohyama's Iris Plaza store breach may expose data on 7.7 million people: First notice: Iris Plaza confirms unauthorized access to its e-commerce site, keeps the site suspended and says no credit card leak has been found. It reports the incident to the police and Japan's Personal Information Protection Commission.\n\nSource: https://www.irisohyama.co.jp/news/2026/?date=1029",
      "date_published": "2026-10-29T00:00:00.000Z",
      "external_url": "https://www.irisohyama.co.jp/news/2026/?date=1029",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/iris-ohyama-iris-plaza-cloud-breach-7-7m-nov-2026#2026-10-28-06486287",
      "url": "https://pwn.watch/i/iris-ohyama-iris-plaza-cloud-breach-7-7m-nov-2026#2026-10-28-06486287",
      "title": "Iris Ohyama's Iris Plaza store breach may expose data on 7.7 million people: Iris Plaza finds a suspicious file in an external cloud service it uses, immediately stops the Iris Plaza online store and related systems, and cuts off the unauthorized access route. The SIMPLE STYLE store and Iris Tech Service sites (appliance subscriptions, furniture and appliance delivery) are taken offline the same day as a precaution.",
      "content_text": "Iris Ohyama's Iris Plaza store breach may expose data on 7.7 million people: Iris Plaza finds a suspicious file in an external cloud service it uses, immediately stops the Iris Plaza online store and related systems, and cuts off the unauthorized access route. The SIMPLE STYLE store and Iris Tech Service sites (appliance subscriptions, furniture and appliance delivery) are taken offline the same day as a precaution.\n\nSource: https://www.irisohyama.co.jp/news/2026/?date=1105",
      "date_published": "2026-10-28T00:00:00.000Z",
      "external_url": "https://www.irisohyama.co.jp/news/2026/?date=1105",
      "tags": [
        "high"
      ]
    }
  ]
}