Japanese homeware giant pulls online store after cloud breach puts 7.7M records at risk

Iris Ohyama has taken its Iris Plaza online store offline after confirming unauthorised access to a third-party cloud service that may have held personal information on 7.7 million people. The incident matters because shoppers cannot currently order through the site, and the company has not established whether any data was taken or when the store will reopen.

The potentially affected records include 5.8 million registered customers, including former members, and 1.9 million people who bought without an account or took part in promotions. Information may include names, contact details, dates of birth, gender and passwords; payment card details were not stored in the affected service. Iris Ohyama advises people who reused their Iris Plaza password elsewhere to change it, and warns customers about impersonation scams. Its stores on Rakuten, Yahoo! Shopping and auPAY Market remain open.