EXPLORINEER
en

JP — ITmedia

Iris Ohyama's online store hit by unauthorized access; information leak under investigation

Security1 min read

Iris Ohyama, a Japanese home goods maker, says its online shop Iris Plaza was hacked. The shop is paused while the company checks whether any customer data leaked.

What happened

On October 29, Iris Ohyama said that its official online shop, Iris Plaza, had been accessed illegally. The company stopped the site for now. It has not yet confirmed whether any information was leaked. Credit card information has not been confirmed as leaked so far, and the company is still checking other data.

Key facts

  • Date announced: October 29 (article published October 30, 2026)
  • Shop affected: Iris Plaza, an online shop run by Iris Ohyama
  • Status: site temporarily paused
  • Credit card data leak: not confirmed so far
  • Other data: still being checked

Some context

Iris Ohyama sells many household products. Its online shop is one of the ways customers buy from the company. An illegal access means that someone got into a computer system without permission. This can put customer names, addresses, or payment details at risk.

Why it matters

Online shops hold a lot of personal data. Customers want to know if their information is safe. Recent news shows that many online stores in Japan have had similar problems, so shoppers should watch for updates and be careful with unusual messages.

What to watch

  • Results of the company's investigation into any data leak
  • When Iris Plaza will open again
  • Updates on the company website as more details are found

Glossary

Iris Ohyama
A Japanese company that makes and sells home goods, such as storage, appliances, and daily products.
Iris Plaza
The official online shop run by Iris Ohyama, where customers can buy its products.

Same story, different eyes

Ad

Add 150 words. Learn 10 a day.

Dicter word books send only the words you learn to your review notes.

More in this topic

SecurityITmedia

Yakult Honsha Confirms Leak of About 40,000 Personal Records After Unauthorized Access to Official Website

Yakult Honsha announced on October 30 that its website was accessed by a third party without authorization, leading to the leak of personal information for about 40,000 people, including users of its inquiry forms. Leaked data includes names, contact details and inquiry content, as well as member information for its "Tanoshii Kyushoku" program, while the company says it does not hold customer credit card or bank account details. The website was taken offline on October 26 and remained under maintenance as of October 30, and the company has reported the incident to the Personal Information Protection Commission and consulted police.

SecurityVnExpress

Trucks carrying AI data center equipment become thieves' targets

Thieves have hijacked logistics companies' accounts and posted fake loads to take over real shipments of AI data center equipment in the US. According to NBC News, goods worth more than $100 million have been stolen since June, including Bitcoin mining devices, servers, copper wire and memory chips. Logistics firms are responding by adopting new software to verify driver licenses and using generative AI to track cargo.

SecurityThe Register

Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers

Dream researchers say suspected Chinese attackers chained PHP2Shell with the Linux kernel flaw Fragnesia (CVE-2026-46300) to gain root on 25 servers, including Palo Alto Networks firewalls linked to US government-affiliated organizations. The attacks began October 23 and targeted organizations in the US, Japan, Taiwan, and South Korea. Dream believes the attackers likely still have persistent remote access to compromised networks.

SecurityVnExpress

Tech-savvy young people can still fall into scam traps

At the launch of the CyberZ project in Hanoi on October 29, Colonel Hà Văn Bắc, Deputy Director of the Cybersecurity Department under the Ministry of Public Security, said that quick access to technology does not make young people immune to online scams, especially as criminals combine AI with psychological manipulation. He cited cases of students manipulated through "online kidnapping" schemes and said anti-scam efforts should focus on building community capacity to recognize and respond to constantly changing threats. The CyberZ project, directed by the Cybersecurity Department and sponsored by the Vietnam Student Association, includes an information portal and the CyberZ Challenge contest for student ideas.