Iris Plaza Breach May Have Exposed Data of 7.7 Million Customers

The Iris Plaza online shopping platform suffered a data breach due to compromise of an external cloud service. Personal information of approximately 7.7 million individuals was potentially exposed, including names, addresses, phone numbers, email addresses, dates of birth, gender, and encrypted passwords for platform members. Non-members who made purchases without registration also had some personal data exposed. No credit card information or physical stores were affected. The company has blocked attacker access, notified authorities, and suspended the platform while investigating and remediating the incident.

• securityweek.com/iris-plaza-breach-may-have-exposed-data-of-7-7-million-customers/ (opens in a new tab)

• Multiple Vulnerabilities in SS1/ SS1 Cloud and the ODM product rocoeyesMediumVulnerability2026-11-09
• ARTEX abuse expands as cybercriminals target financial sectorAnalysis2026-11-07
• CVE-2026-119923 and CVE-2026-119924: Issues with Babelfish for Aurora PostgreSQLHighVulnerability2026-11-06
• CVE-2026-122193: REXHighVulnerability2026-11-06
• OpenAI Model Wrote Its Own Network Code to Get Around Sandbox RestrictionsNews2026-11-06