Iris Ohyama says cloud breach may affect 7.7 million customers
Nov 8, 2026 · Summarized by Fundy Tech from BleepingComputer
Iris Ohyama says personal information for up to 7.7 million people may have been exposed through a third-party cloud service. The company suspended related sites and notified regulators and police.
Key points
- The breach involves Iris Plaza, the company’s online shopping platform.
- Up to 5.8 million members and former members, plus 1.9 million non-members, may be affected.
- The company says credit card data was not stored in the affected cloud service.
- Japan’s privacy commission and police were notified on October 29, 2026.
Why it matters
If you shopped with Iris Plaza, your contact details or account data may be involved. That can lead to phishing attempts, account fraud, or scam messages. For businesses supplying services or products to the company, this may also disrupt orders and customer communication.
Who’s affected: Iris Plaza customers and members
What to do
- Watch for scam emails or calls using Iris Plaza details.
- Change reused passwords if you had an Iris Plaza account.
- Check company notices for updates on the suspension and exposure scope.
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.