Japanese manufacturer Iris Ohyama says personal data on up to 7.7 million people may have been exposed after someone got into a third-party cloud service used by its Iris Plaza online store, BleepingComputer reports.
What we know
- It found a suspicious file in the external cloud service, suspended Iris Plaza and related systems, and first disclosed it on Oct. 29.
- Up to 5.8 million registered and former members and 1.9 million non-members may be affected.
- Active members’ passwords were stored encrypted (scheme not given). Former members’ passwords weren’t stored, and credit cards weren’t in that service.
- As of Nov. 5, no reported misuse or financial loss.
My take
Another breach through a third-party cloud service. Your data is only as safe as your vendor’s weakest bucket. If you shop there, change your password and watch for phishing that uses your order history.
God Bless, and Happy hacking!
