[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Cybersecurity News · markdown

official (Iris Plaza / Iris Ohyama second report, Nov 5); first notice Oct 29; leak count still under investigation

Iris Plaza: personal data on about 7.7 million people may have leaked from an external cloud service used by its Japanese e-commerce site

  • Who: about 5.8 million member records (including people who already closed accounts) and about 1.9 million non-member records.
  • Not in the affected service (per Iris Plaza): credit-card data. Withdrawn members' passwords were not in the member-data set described above.
  • Also taken offline as a precaution on Oct 28: the group's SIMPLE STYLE store and Iris Tech Service appliance-subscription and delivery sites; Iris Plaza says it has not confirmed unauthorized access or a leak on those services.
  • If you shopped there: change the password anywhere you reused it. Iris Plaza says it will email affected customers and will never ask for a password, PIN or authentication code, or send a link that asks you to type one.

Sources: Iris Ohyama / Iris Plaza: second report on the EC-site outage and possible personal-data leak (Nov 5, Japanese) · Iris Plaza second-report PDF (Nov 5, Japanese) · Iris Plaza first report (Oct 29, Japanese)