Iris Ohyama revealed that unauthorized access to a third-party cloud service exposed personal data of approximately 7.7 million individuals. The incident affects 5.8 million registered and former members, as well as 1.9 million non-members of the Iris Plaza platform. Exposed information includes names, addresses, contact details, birth dates, and encrypted account passwords. The company suspended its online store and related systems on October 28, 2026, and notified Japanese authorities the following day. No reports of data misuse or financial loss had been received as of November 5, 2026.
Read the full story at bleepingcomputer.com.
