Threat Intelligence Brief
Automated AI summary of third-party reporting
Source: bleepingcomputer.com
Threat Risk: High
Victim: Iris Ohyama
Incident: An unauthorized third party accessed an external cloud service used by the Iris Plaza shopping platform, exposing customer data.
Impact: Potential exposure of personal information belonging to approximately 7.7 million individuals, including names, addresses, and encrypted passwords.
Attacker: Not reported in the source
Analysis: Unauthorized access to an external cloud service utilized by the Iris Plaza shopping platform has exposed millions of records containing personal details. The affected information includes names, addresses, phone numbers, emails, and account passwords, though financial data remained untouched. The company responded by temporarily suspending related online systems and notifying local authorities and privacy regulators.
Recommendations: Conduct a thorough audit of external cloud service permissions and access controls.; Notify affected individuals promptly and advise registered users to update account credentials.; Implement robust monitoring for third-party storage environments to detect unauthorized file access early.
Source: BleepingComputer
AI disclosure: this summary was generated automatically by AI from the linked article and was not reviewed by a person. It may contain errors; check the original source before relying on it.
View Original Source
Latest Developments
Update — 2026-11-08 19:01 UTC
An unauthorized third party broke into an external cloud service used by the Iris Plaza online store. Personal information belonging to roughly 7.7 million shoppers may have been accessed or exfiltrated. Iris Ohyama discovered unauthorized intrusion into a third-party cloud environment supporting its Iris Plaza online marketplace. The incident potentially exposed extensive personal details for millions of shoppers, though payment card data remained safe. The firm responded by shutting down affected storefronts, notifying authorities, and launching an ongoing investigation.
Corroborating source: mlq.ai
Update — 2026-11-08 20:32 UTC
A data breach affected 7.7 million users, exposing multiple categories of personal identifiable information. Millions of users face elevated risks of identity theft and credential stuffing attacks due to exposed passwords and personal details. A recent security breach at Iris Ohyama potentially compromised sensitive information belonging to 7.7 million individuals. Exposed records include names, physical addresses, contact details, dates of birth, and account passwords. The text does not provide specific details regarding the exact intrusion vector or the threat actor responsible.
Corroborating source: atlabyte.com
Update — 2026-11-08 22:23 UTC
An unauthorized party gained access to a third-party cloud service used by the Iris Plaza online shopping platform. Personal information for approximately 7.7 million individuals was potentially exposed, leading to a temporary suspension of online store services. Unauthorized actors accessed a third-party cloud environment tied to an e-commerce platform, exposing personal data for millions of registered members and guests. The company responded by suspending online operations, alerting law enforcement, and launching an ongoing forensic investigation. Although passwords were encrypted and financial details were kept elsewhere, the incident underscores supply chain vulnerabilities.
Corroborating source: scworld.com