Japanese Retailer Iris Ohyama Suffers Cloud Breach, Exposing 7.7 Million Customer Records
Japanese homeware giant Iris Ohyama has taken its online store offline following a cloud breach that potentially exposed the personal data of 7.7 million customers.
Japanese electronics and homeware retailer Iris Ohyama has been forced to suspend its online store operations after a significant cloud breach potentially compromised the personal data of approximately 7.7 million customers. The incident, first detected on October 29, involved unauthorized access to a third-party cloud service utilized by its Iris Plaza e-commerce platform.
Following the discovery of a suspicious file on the cloud service, Iris Plaza immediately halted its website and associated systems to investigate. The company subsequently confirmed that unauthorized access had occurred. The breach potentially impacts a vast number of individuals, with Iris Ohyama stating that the affected cloud environment contained personal information for around 5.8 million registered customers, including former members, and an additional 1.9 million individuals who had made purchases without creating an account or had participated in promotional campaigns.
The compromised data may include sensitive customer details such as names, physical addresses, phone numbers, email addresses, dates of birth, and gender. While the company noted that passwords were also stored in the affected environment, it stated that some of this data was encrypted. However, Iris Ohyama has not yet disclosed the specific encryption methods used, prompting advice for customers to change passwords reused on other platforms.
Fortunately for concerned shoppers, Iris Ohyama has confirmed that payment card information was not stored within the compromised cloud service and therefore was not affected by the breach. The company is still actively investigating the full scope of the intrusion and has not yet determined if any personal information was actually exfiltrated by the attackers.
As of the latest update, Iris Plaza's main website remains offline, with no clear timeline provided for its restoration. This outage is affecting new orders, and customers attempting to cancel existing purchases have been advised that deliveries might arrive before cancellations are processed. However, Iris Ohyama's presence on other major Japanese e-commerce marketplaces, including Rakuten, Yahoo! Shopping, and auPAY Market, remains unaffected and operational, with no indication that these platforms were compromised.
Iris Ohyama has formally reported the incident to Japanese authorities and plans to notify all potentially affected customers individually. The company has also issued a warning to consumers to be vigilant against potential phishing attempts, fraudulent phone calls, or fake websites that may impersonate the retailer in the wake of the breach.
Details regarding the specific third-party cloud provider involved, the exact method of intrusion, and confirmation of data exfiltration are still under investigation. The company's transparency on these crucial aspects is awaited as the situation unfolds.
The new article provides further details on the breach, specifying that the compromised external cloud service does not store credit card information and that no physical store locations were affected. It also notes that Iris Ohyama has suspended related services like Simple Style and new applications to the site as a precautionary measure, despite no evidence of compromise on those platforms.