Science & Tech · Cybersecurity · 3 hrs ago
Iris Plaza Says Data of About 7.7 Million People May Have Leaked
Iris Plaza says data for about 7.7 million people may have leaked after unauthorized access to an external cloud service it uses.
The possible exposure affects about 5.8 million current and former members and 1.9 million nonmembers.
The data may include names, addresses, phone numbers and email addresses; some members’ records may also include encrypted passwords and other details.
Credit card information was not stored on the cloud service, and no related misuse has been reported so far.
Iris Plaza found a suspicious file on October 28 and then confirmed unauthorized access; the number of people whose data was actually leaked is still being investigated.
The company is contacting affected customers by email and is working with relevant organizations on its investigation and recovery.
It says it will reopen after identifying the cause and taking steps to prevent a repeat, but the timing is not yet known.
Iris Plaza said personal information belonging to about 7.7 million people may have leaked after unauthorized access to an external cloud service it uses.
The figure includes about 5.8 million members, including former members, and about 1.9 million non-members.
The information potentially affected includes names, addresses, phone numbers and email addresses, with some additional data for members.
The company said credit card information was not stored on the cloud service and was not affected.
The number of records and people actually affected is still under investigation.
- Who
- Iris Plaza, the operator of the online shopping site, reported the possible leak.
- What
- Personal information of about 7.7 million people may have been exposed through unauthorized access to an external cloud service.
- When
- The company announced the possible leak on November 5. It found a suspicious file on October 28.
- Where
- An external cloud service used by Iris Plaza.
- Why
- The cause of the unauthorized access was not stated.
This story does not have two clearly opposing sides.
Iris Plaza found a suspicious file on an external cloud service and confirmed unauthorized access after stopping the site and related systems to investigate.
Iris Plaza announced that personal information belonging to about 7.7 million people may have leaked.
- Potentially affected people
- About 7.7 million
- Members, including former members
- About 5.8 million
- Non-members
- About 1.9 million
- Credit card information
- Not stored on the affected cloud service
- Customer notification
- Individual emails began on November 5