The Iris Ohima cloud breach may have exposed 7.7 million records.
Japanese manufacturer Iris Ohima says unauthorized access to a third-party cloud service used by its Iris Plaza store may have exposed data on up to 7.7 million people. The affected set includes 5.8 million members or ex-members and 1.9 million non-members, with possible exposure of names, addresses, phone numbers, email addresses, gender, dates of birth and some encrypted passwords. Iris Plaza and related systems were suspended.
The event is notable for its scope and concentration of consumer identity data in an external cloud environment. Even without payment card data on the affected service, the exposed fields are sufficient for misuse of credentials, targeting account recovery, and.
Open sources - closed narratives.