Iris Ohyama cloud breach exposes personal data of 7.7 million shoppers

Japanese manufacturer Iris Ohyama disclosed that unauthorized access to a third-party cloud service may have exposed the personal information of about 7.7 million people. BleepingComputer, Mezha.net, SC Media, MLQ.ai, and SecNews.gr all reported that the security breach affected users of the company's Iris Plaza shopping platform. BleepingComputer added that the company discovered the incident late last month and publicly disclosed it with limited initial details. [1][2][3][4][5]

The breach originated from unauthorized access to a third-party cloud service utilized by the manufacturer, according to BleepingComputer, Mezha.net, and MLQ.ai. MLQ.ai noted that the exposure impacts up to 7.7 million Iris Plaza shoppers. The company has publicly acknowledged the security incident alongside an official announcement. [1][2][4]

Iris Ohyama Inc. is a Japanese consumer plastic manufacturer headquartered in Aoba-ku, Sendai, Miyagi Prefecture, and is the leading storage organization manufacturer in Japan. The company designs and manufactures products for the furniture, housewares, garden accessories, office products, and pet supplies markets. Its history traces back to 1958 when Morisuke Ohyama founded OHYAMA Blow Industry, with the business formally incorporated in April 1971. The enterprise officially renamed to IRIS OHYAMA Inc. in 1991 after introducing its clear storage boxes in 1989. [6][7]

Security incidents targeting Japanese online platforms have affected multiple services recently. As FTMQ Security reported earlier, Japanese internet provider GMO Internet urged Onamae Desktop Cloud customers to disconnect their systems from the internet following a virtual private server platform security breach. [8]