Iris Plaza, the online shop of Japan's Iris Ohyama group, says personal data of up to about 7.7 million people may have leaked
Reported1 distinct origin, 0 independent.
Iris Plaza, the e-commerce arm of the Iris Ohyama group in Japan, said it found a suspicious file on an external cloud service it uses on 28 October, stopped its official online shop and related systems, and confirmed unauthorized access by a third party, Netshop Tanto-sha Forum reported. In a notice dated 5 November, Iris Plaza said personal data of up to about 7.7 million people may have leaked, about 5.8 million members and about 1.9 million non-members, including names, addresses, phone numbers and email addresses, according to Netshop Tanto-sha Forum; SecurityWeek also reported the 7.7 million figure. Iris Plaza said card data was not stored there, that it reported the incident to the police and the Personal Information Protection Commission, and that no misuse had been reported as of 5 November. Its own shop stays offline with no restart date, while its shops on other e-commerce malls were not affected, Netshop Tanto-sha Forum reported on 9 November. Nobody has named an actor.
- When
- 28 October 2026
- Where
- Japan, Japan
- What
- cyber, company
- Attribution
- Not attributed. Iris Plaza named no attacker, and no government, court or examining company has named one.
- In the record
- Published 2026-11-11 01:43 UTC
Sources
- Evidence Iris Ohyama
- Evidence Netshop Tanto-sha Forum
対象データは、会員約580万人分と非会員約190万人分
- Evidence SecurityWeek
History
- First recorded 11 Nov, 01:43 UTC, as reported (one origin only).
Cite or reuse
The War Record, "Iris Plaza, the online shop of Japan's Iris Ohyama group, says personal data of up to about 7.7 million people may have leaked", record ev-20261111-b3h5, version 1, https://thewarrecord.com/events/ev-20261111-b3h5/