The Japanese company Iris Ohyama revealed that the personal information of approximately 7.7 million people could have been exposed due to unauthorized access to a third-party cloud service. The company discovered the incident at the end of last month and announced it publicly with few details, along with the temporary suspension of the website.

In an update published this week, the company indicated that it found a suspicious file in an external cloud service used by the online store Iris Plaza. The company detailed that it immediately suspended Iris Plaza and related systems, and confirmed the unauthorized access by a third party in its first notice on October 29.

The investigation confirmed that the customer data stored in the compromised cloud service could have been accessed by unauthorized actors. Although the company is still determining the exact number of exposed records and the number of affected people, it mentioned that the impact covers up to 5.8 million registered members and former members, and 1.9 million non-members.

Written automatically with AI.