# SZB-f3cdbd0ed8: Iris Ohyama says data of about 7.7 million people may have been exposed

Iris Ohyama, operator of the Iris Plaza shopping platform, disclosed unauthorized access to a third-party cloud service it used.

- Type: Breach
- Status: Confirmed
- Vendor: Iris Ohyama
- Product: Iris Plaza
- Disclosed: 2026-11-08 15:43 UTC
- Data taken: About 7.7M records: Names, Home addresses, Phone numbers, Email addresses, Dates of birth, Password hashes
- Way in: Third-party vendor (BleepingComputer: “Japanese manufacturer Iris Ohyama, the operator of the Iris Plaza shopping platform, disclosed that personal information belonging to about 7.7 million people…”, [source](https://www.bleepingcomputer.com/news/security/iris-ohyama-data-cloud-breach-exposes-info-of-77-million-customers/))
- Sources: 10 distinct
- First seen by cve.now: 2026-11-08 15:44 UTC · Updated: 2026-11-09 23:45 UTC

Written by a model from the sources below. Verify against them.

## Summary

The company said personal information of about 7.7 million people may have been exposed.

## What to do

- Change your password there and anywhere you reused it, and turn on multi-factor authentication · For password hashes (current and former platform members)
- Expect phishing that uses this breach; verify messages that mention it · For home addresses (5.8 million current and former platform members), phone numbers (5.8 million current and former platform members) and email addresses (5.8 million current and former platform members)
- Expect scammers to use your birth date to pass identity checks; add a PIN or passphrase with your bank and phone carrier · For dates of birth (5.8 million current and former platform members)
- Watch for Iris Plaza notices and follow the company's guidance
- Change your Iris Plaza account password and any reused passwords
- Be wary of unexpected emails or messages that reference Iris Plaza or your orders
- Monitor accounts and payment records for suspicious activity

## Timeline

- 2026-11-08 15:43 UTC: Made public by BleepingComputer
- 2026-11-08 15:43 UTC: Confirmed by Iris Ohyama. BleepingComputer: “We confirmed unauthorized access by a third party and disclosed it in our first notice on October 29,” ([source](https://www.bleepingcomputer.com/news/security/iris-ohyama-data-cloud-breach-exposes-info-of-77-million-customers/))
- 2026-11-08 15:44 UTC: First seen by cve.now
- 2026-11-09 23:45 UTC: Record last updated

## What was taken

About 7.7M records, per [BleepingComputer](https://www.bleepingcomputer.com/news/security/iris-ohyama-data-cloud-breach-exposes-info-of-77-million-customers/).

- Names (5.8 million current and former platform members), Home addresses (5.8 million current and former platform members), Phone numbers (5.8 million current and former platform members), Email addresses (5.8 million current and former platform members), Dates of birth (5.8 million current and former platform members), Password hashes (current and former platform members): [SecurityWeek](https://www.securityweek.com/iris-plaza-breach-may-have-exposed-data-of-7-7-million-customers/): “Of the 7.7 million individuals potentially affected, 5.8 million are current and former platform members who had their names, addresses, phone numbers, email addresses, dates of birth, gender information, and encrypted passwords compromised.”

## Evidence (10 sources)

- 2026-11-08 · Press · [BleepingComputer](https://www.bleepingcomputer.com/news/security/iris-ohyama-data-cloud-breach-exposes-info-of-77-million-customers/): “Japanese manufacturer Iris Ohyama, the operator of the Iris Plaza shopping platform, disclosed that personal information belonging to about 7.7 million people may have been exposed after unauthorized access to a third-party cloud service the company used.” (+1 more: [BleepingComputer on Bluesky](https://bsky.app/profile/bleepingcomputer.com/post/3mzsqudpl3k2k))
- 2026-11-08 · Social · [Bluesky](https://bsky.app/profile/sipirtu.com/post/3mzsreey7mm2t): “Iris Ohyama said personal information of about 7.7 million people may have been exposed after unauthorized access to a third-party cloud service it used.” (+12 more: [Bluesky](https://bsky.app/profile/newssecia.bsky.social/post/3mzsub3nq772k), [Bluesky](https://bsky.app/profile/lrbilool.bsky.social/post/3mzuy7j2t7c2p), [Bluesky](https://bsky.app/profile/hapsis.bsky.social/post/3mzv3ieoe7k23), [Bluesky](https://bsky.app/profile/hendryadrian.bsky.social/post/3mzvblsfq5j2l), [Bluesky](https://bsky.app/profile/hacker.at.thenote.app/post/3mzvd6bjq7s2r), [Bluesky](https://bsky.app/profile/cysecuritynews.bsky.social/post/3mzvdudhv2e2k), [Bluesky](https://bsky.app/profile/thenewoil.org/post/3mzvdzoy73u32), [Bluesky](https://bsky.app/profile/packetstorm.bsky.social/post/3mzvirrbtu627), [Bluesky](https://bsky.app/profile/patrickcmiller.bsky.social/post/3mzvjmzx4l523), [Bluesky](https://bsky.app/profile/patrickcmiller.bsky.social/post/3mzvtovvytq2l), [Bluesky](https://bsky.app/profile/undercodenews.bsky.social/post/3mzvwmmzn4g2i), [Bluesky](https://bsky.app/profile/kitafox.bsky.social/post/3mzvy3k36ih2z))
- 2026-11-08 · Social · [Mastodon](https://mastodon.social/@Analyst207/117581626047111649): “A massive data breach at Iris Ohyama has exposed the personal information of 7.7 million customers, after a third-party cloud service used by the company's online storefront was hacked.” (+7 more: [Mastodon](https://infosec.exchange/@cloud/117581823549367013), [Mastodon](https://infosec.exchange/@cloud/117584709811521988), [Mastodon](https://mastodon.social/@ninjaintelgroup/117585346665135071), [Mastodon](https://infosec.exchange/@beyondmachines1/117585666766793883), [Mastodon](https://mastodon.social/@derdreschi85/117586237137503180), [Mastodon](https://mastodon.social/@Analyst207/117586580478927592), [Mastodon](https://mastodon.thenewoil.org/@thenewoil/117587430623200205))
- 2026-11-08 · Social · [Bluesky](https://bsky.app/profile/mattd6.bsky.social/post/3mzsrtd6jkd2y): “Iris Ohyama data cloud breach exposes info of 7.7 million customers” (+12 more: [Bluesky](https://bsky.app/profile/infosec.skyfleet.blue/post/4lx254ohmly7z), [Bluesky](https://bsky.app/profile/undercodenews.bsky.social/post/3mzss7inmua2y), [Bluesky](https://bsky.app/profile/ninjaowl.ai/post/3mzsvvu23cf2s), [Bluesky](https://bsky.app/profile/integralconsvc.bsky.social/post/3mzsz7iz7hf2t), [Bluesky](https://bsky.app/profile/undercodenews.bsky.social/post/3mztdvy5o232k), [Bluesky](https://bsky.app/profile/hamzafaisal.bsky.social/post/3mztqhhwmyk23), [Bluesky](https://bsky.app/profile/neowin.net/post/3mzttgphmer2d), [Bluesky](https://bsky.app/profile/cybersec24.com/post/3mzu5ew2epz2q), [Bluesky](https://bsky.app/profile/ninjaintelgroup.bsky.social/post/3mzugcxou3s2q), [Bluesky](https://bsky.app/profile/derdreschi84.bsky.social/post/3mzusyb7ex22s), [Bluesky](https://bsky.app/profile/techrad.ar/post/3mzv5anp3cy2j), [Bluesky](https://bsky.app/profile/crustytldr.bsky.social/post/3mzv74z3tfj2n))
- 2026-11-08 · Social · [Mastodon](https://infosec.exchange/@cyberworldops/117581668110937136): “Iris Ohyama disclosed a cloud intrusion with potential impact on 7.7 million customers.”
- 2026-11-09 · Social · [Bluesky](https://bsky.app/profile/newssecia.bsky.social/post/3mzu5bo7brs2s): “7.7M affected by an Iris Plaza breach — suspicious file in third-party cloud.”
- 2026-11-09 · Social · [Mastodon](https://mastodon.social/@burso/117585347675717401): “Iris Ohyama says data on up to 7.7M people tied to its Iris Plaza store may have leaked from a breached third-party cloud service: names, addresses, emails, birth dates, encrypted passwords.”
- 2026-11-09 · Social · [Bluesky](https://bsky.app/profile/shiojiri.com/post/3mzugqj7pgkfj): “アイリスプラザ、約770万人分の個人情報漏えいか。退会者のデータも対象”
- 2026-11-09 · Social · [r/cybersecurity](https://www.reddit.com/r/cybersecurity/comments/1xrnkb8/iris_ohyama_77m_people_in_an_external_cloud/): “Iris Ohyama said on Nov 5 that data on about 7.7 million people may have been exposed after a suspicious file turned up on Oct 28 in an external cloud service used by its Iris Plaza online store.”
- 2026-11-09 · Press · [SecurityWeek](https://www.securityweek.com/iris-plaza-breach-may-have-exposed-data-of-7-7-million-customers/): “Hackers compromised an external cloud service used by the shopping platform and may have stolen personal information from it.”

## Corrections

- 2026-11-09: Changed “Names were exposed” to “Names of 5.8 million current and former platform members were exposed”.
- 2026-11-09: Changed “Home addresses were exposed” to “Home addresses of 5.8 million current and former platform members were exposed”.
- 2026-11-09: Changed “Phone numbers were exposed” to “Phone numbers of 5.8 million current and former platform members were exposed”.
- 2026-11-09: Changed “Email addresses were exposed” to “Email addresses of 5.8 million current and former platform members were exposed”.
- 2026-11-09: Changed “Dates of birth were exposed” to “Dates of birth of 5.8 million current and former platform members were exposed”.

Something wrong on this page? Report an error: https://github.com/sazabi/cve.now/issues/new?title=Wrong%20fact%20on%20SZB-f3cdbd0ed8&body=https%3A%2F%2Fcve.now%2FSZB-f3cdbd0ed8%0A%0AWhat%20is%20wrong%2C%20and%20the%20source%20that%20shows%20it%3A%0A

## Questions about the Iris Ohyama breach

### Was Iris Ohyama breached?

Yes. Iris Ohyama says so: “We confirmed unauthorized access by a third party and disclosed it in our first notice on October 29,” (BleepingComputer).

Source: https://www.bleepingcomputer.com/news/security/iris-ohyama-data-cloud-breach-exposes-info-of-77-million-customers/

### What data was exposed?

About 7.7M records. Names (5.8 million current and former platform members), Home addresses (5.8 million current and former platform members), Phone numbers (5.8 million current and former platform members), Email addresses (5.8 million current and former platform members), Dates of birth (5.8 million current and former platform members), Password hashes (current and former platform members).

### What should Iris Ohyama customers do?

Change your password there and anywhere you reused it, and turn on multi-factor authentication. Expect phishing that uses this breach; verify messages that mention it. Expect scammers to use your birth date to pass identity checks; add a PIN or passphrase with your bank and phone carrier. Watch for Iris Plaza notices and follow the company's guidance. Change your Iris Plaza account password and any reused passwords. Be wary of unexpected emails or messages that reference Iris Plaza or your orders. Monitor accounts and payment records for suspicious activity.

## Related

- Started as early warning SZB-f3cdbd0ed8, first seen 2026-11-08 15:44 UTC
- Early warning [SZB-f41b169b02](https://cve.now/SZB-f41b169b02.md)
- Browse: [Breaches](https://cve.now/breaches.md) · [Early warnings](https://cve.now/early-warnings.md)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/SZB-f3cdbd0ed8
Site guide for agents: https://cve.now/llms.txt