Iris Ohyama Data Breach May Have Exposed Up to 7.7 Million Customers
The Japanese home goods maker says customer information tied to its Iris Plaza online store may have been accessed. Here is what shoppers should do.
Iris Ohyama, the Japanese maker of appliances, storage and home products, has disclosed a security incident that may affect the data of up to 7.7 million customers of its Iris Plaza online shopping service.
According to BleepingComputer, the company discovered unauthorized access on October 28 and made the incident public on November 5. The investigation is ongoing, and the company has not said who was behind the attack.
Why it matters
Large retail breaches are valuable to scammers because they combine names, email addresses and purchase histories. That data makes follow-up phishing emails far more convincing, since a message can mention a real order or product you bought.
What customers should do
- Change your Iris Plaza password, and change it anywhere else you reused it.
- Turn on two-factor authentication wherever it is offered.
- Be suspicious of emails or texts about refunds, delivery problems or account checks, even if they mention a real order.
- Watch your card statements and report anything you do not recognize to your bank.
The incident adds to a busy season for retail breaches. Hearing care company Amplifon also filed a notice in Texas this month saying a separate incident may involve about 1.33 million US customers.
Sources
This story is based on reporting and official statements from:
Details were accurate when published on November 8, 2026. Found an error? Email [email protected].
