Iris Ohyama discloses cloud breach that may have exposed 7.7 million people's data
Japanese manufacturer Iris Ohyama, which operates the Iris Plaza shopping platform, has disclosed that personal information of about 7.7 million people may have been exposed. The exposure followed unauthorized access to a third-party cloud service the company uses.
What the company has disclosed
Iris Ohyama reported that personal information belonging to roughly 7.7 million individuals may have been accessed by an unauthorized party. The intrusion targeted a cloud service operated by a third party and used by the company, rather than a system the company runs itself.
The disclosure is reported by BleepingComputer, which is the only outlet cited for the account in the facts available to WORLDTECH. The company's own statement is the basis for the figure, and the facts describe the affected data as possibly exposed rather than confirmed as taken.
Open questions
- What categories of personal information were involved?
- Has the third-party cloud provider confirmed how the access occurred?