The company discovered the incident late last month and publicly disclosed it with limited details, along with an announcement that the site would be temporarily suspended. In an update earlier this week, the company said it had discovered a suspicious file in an external cloud service used by the Iris Plaza online store.
"We immediately suspended Iris Plaza and related systems and began an investigation. We confirmed unauthorized access by a third party and disclosed it in our first notice on October 29," [machine translated] the company said.
The investigation has confirmed that customer data stored in the compromised external cloud service may have been accessed by unauthorized actors. While the company is still trying to determine the number of records exposed and how many people are impacted, it notes that the impact extends to up to 5.8 million registered members and former members, and 1.9 million non-members.
