# Iris Ohyama Shuts Online Store Following Massive Cloud Data Breach Japanese retailer suspends operations after unauthorized access potentially exposes 7.7 million customer records. - **Source:** [www.theregister.com - Articles (theregister.co.uk)](https://brifing.si/source/e6d4ec13-4d0e-407a-b96d-39609d76c3b1) - **Published:** 2026-11-09 - **Topic:** [technology](https://brifing.si/c/technology) - **Original article:** - **On Brifing:** https://brifing.si/s/42633c45-9b45-4b23-810f-ad11b8f18099 ## Unauthorized Cloud Access Detected Japanese retailer Iris Ohyama suspended its Iris Plaza ecommerce platform on October 29 after identifying a suspicious file on a third-party cloud service. The company confirmed that unauthorized parties potentially accessed sensitive data belonging to 7.7 million customers. The site remains offline while the investigation into the security intrusion continues. ## Scope of Compromised Data The breach affects 5.8 million registered members and 1.9 million guest shoppers or promotional participants. Potentially exposed information includes names, addresses, phone numbers, email addresses, dates of birth, gender, and passwords. While some passwords were encrypted, the company has not specified the encryption standards used to protect this sensitive user data. ## Payment Information Remains Secure Iris Ohyama confirmed that credit card details were not stored within the compromised cloud environment. Consequently, payment data remains unaffected by this specific security incident. Despite this, the company has advised customers to change passwords immediately if they have reused their Iris Plaza credentials on any other online platforms or services. ## Operational Impact on Retail The Iris Plaza website is currently inaccessible, preventing new orders and complicating existing ones. Customers attempting to cancel pending purchases have been instructed to refuse delivery if their items arrive before the cancellation is processed. Shipping times for previously placed orders are also experiencing significant delays due to the ongoing system outage. ## Alternative Sales Channels Active While the primary Iris Plaza store is down, the company’s presence on third-party marketplaces remains functional. Stores hosted on Rakuten, Yahoo! Shopping, and auPAY Market continue to operate normally. Iris Ohyama stated that it has found no evidence of security compromises affecting these specific external platforms, allowing customers to continue shopping there. ## Response and Regulatory Reporting Iris Ohyama has formally reported the incident to Japanese authorities and is preparing to contact affected individuals directly. The company is currently investigating the full extent of the data leak to determine if information was actually exfiltrated. They have not yet identified the specific cloud provider involved in the security failure. ## Security Warnings for Customers The retailer has issued a stern warning to customers regarding potential follow-up attacks. Shoppers should remain vigilant against phishing emails, fraudulent phone calls, and fake websites impersonating the brand. These tactics are common secondary threats following large-scale data breaches, as attackers attempt to leverage stolen contact information for further malicious activities. ## Ongoing Investigation and Uncertainty The company has not provided a timeline for when the Iris Plaza website will resume normal operations. Critical questions regarding the entry point of the attackers and the actual volume of stolen data remain unanswered. The incident highlights the persistent risks associated with third-party cloud storage configurations in modern retail ecommerce operations. ## Sources covering this story - https://www.theregister.com/cyber-crime/2026/11/09/japanese-homeware-giant-pulls-online-store-after-cloud-breach-puts-77m-records-at-risk/5308377 — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._