Iris Ohyama takes Iris Plaza online store offline after third-party cloud breach may expose 7.7M customer records
Iris Ohyama, the Japanese homeware and appliance retailer, has taken its Iris Plaza online store offline after unauthorized access to a third-party cloud service used by its ecommerce platform. The company says the affected environment may have held personal data of about 7.7 million people: roughly 5.8 million registered customers, including former members, and 1.9 million people who bought without an account or joined promotions (theregister.com; mezha.net). Exposed fields may include names, addresses, phone numbers, email addresses, dates of birth, gender and passwords, some of them encrypted with a scheme the company has not specified. The retailer says payment card data was not stored in the affected service. Exfiltration is not confirmed, the cloud provider has not been named, and the intrusion path is unknown, while the website has no reopening date and orders are shipping late.
Detalhes técnicos
- A suspicious file was found on the third-party cloud service used by Iris Plaza, and the incident was first disclosed on October 29 (theregister.com). Another report dates the discovery to October 28 (helix.ml).
- The company has not identified the cloud provider or explained how the attackers got in, and it has not established whether any records left its systems (theregister.com).
- As of November 5 the company had received no reports of misuse or financial loss tied to the incident (digg.com, citing bleepingcomputer.com).
- The Iris Plaza stores on Rakuten, Yahoo! Shopping and auPAY Market are still operating, and the company has found no evidence that they were affected (theregister.com).
Remediação
- Customers who reused their Iris Plaza password on other services should change those passwords (theregister.com).
- Users should watch for phishing emails, fraudulent calls and fake websites impersonating the retailer, and the company says it will contact affected customers individually (theregister.com).
- No vendor advisory, patch or CVE has been published for this incident, so the defensive steps above are the only published guidance.
Linha do tempo
-
Iris Ohyama takes Iris Plaza online store offline after third-party cloud breach may expose 7.7M customer records
ler a análise desta fonte ocultar
Iris Ohyama, the Japanese homeware and appliance retailer, has taken its Iris Plaza online store offline after unauthorized access to a third-party cloud service used by its ecommerce platform. The company says the affected environment may have held personal data of about 7.7 million people: roughly 5.8 million registered customers, including former members, and 1.9 million people who bought without an account or joined promotions (theregister.com; mezha.net). Exposed fields may include names, addresses, phone numbers, email addresses, dates of birth, gender and passwords, some of them encrypted with a scheme the company has not specified. The retailer says payment card data was not stored in the affected service. Exfiltration is not confirmed, the cloud provider has not been named, and the intrusion path is unknown, while the website has no reopening date and orders are shipping late.
Technical Details
- A suspicious file was found on the third-party cloud service used by Iris Plaza, and the incident was first disclosed on October 29 (theregister.com). Another report dates the discovery to October 28 (helix.ml).
- The company has not identified the cloud provider or explained how the attackers got in, and it has not established whether any records left its systems (theregister.com).
- As of November 5 the company had received no reports of misuse or financial loss tied to the incident (digg.com, citing bleepingcomputer.com).
- The Iris Plaza stores on Rakuten, Yahoo! Shopping and auPAY Market are still operating, and the company has found no evidence that they were affected (theregister.com).
Remediation
- Customers who reused their Iris Plaza password on other services should change those passwords (theregister.com).
- Users should watch for phishing emails, fraudulent calls and fake websites impersonating the retailer, and the company says it will contact affected customers individually (theregister.com).
- No vendor advisory, patch or CVE has been published for this incident, so the defensive steps above are the only published guidance.