Hackers may have stolen the personal information of 7.7 million people from Japanese online shopping platform Iris Plaza.
The incident, says household products and appliance manufacturer Iris Ohyama, which operates the platform, was discovered on October 28.
The Japanese company immediately suspended Iris Plaza, disconnected related systems, and launched an investigation into the attack.
Of the 7.7 million individuals potentially affected, 5.8 million are current and former platform members who had their names, addresses, phone numbers, email addresses, dates of birth, gender information, and encrypted passwords compromised.
The remaining 1.9 million individuals are non-members who had their names, addresses, phone numbers, and email addresses compromised. They include people who made purchases without registering on the platform.
Iris Ohyama says the hacked external cloud service does not store credit card information. No store operated by Iris Plaza has been affected.
The company says it has blocked the attackers’ access to the service, has notified law enforcement and the relevant authorities, and has retained external experts to aid with the investigation.
“At this time, there have been no reports of unauthorized use or financial damage resulting from this incident,” an automated translation of the company’s incident FAQ reads.
The Iris Plaza platform remains offline while the company investigates the cause of the incident and applies the necessary remediation measures.
Additionally, the manufacturer suspended its home fashion specialty store Simple Style, the Iris Group’s home appliance subscription and delivery and installation services, and new applications to the site, although it has no evidence these sites were compromised as well.
Related: Amplifon Americas Data Breach Impacts 1.3 Million
Related: Over 3 Million People Hit by Frontline Education Data Breach
Related: Florida Student Aid Website Hack Puts Data of 4.9 Million People at Risk
