cyber-crime

No reopening date as orders face delays and some customers are told to refuse deliveries to cancel purchases

Japanese electronics giant Iris Ohyama has taken down its online store after discovering that attackers may have accessed the personal information of 7.7 million customers, leaving shoppers unable to place orders.

The retailer, which sells everything from home appliances and furniture to pet supplies, first disclosed the incident on October 29 , a day after discovering a suspicious file on a third-party cloud service used by its Iris Plaza ecommerce operation.

Iris Plaza immediately suspended its website and associated systems and began investigating, subsequently confirming unauthorized access.

Iris Ohyama has since revealed that the potentially compromised cloud environment contained personal information belonging to approximately 5.8 million registered customers, including former members, and another 1.9 million people who had purchased products without creating an account or…