Another huge data breach hits a major Japanese company — Iris Ohyama attack exposes info of 7.7 million customers
THE SO WHAT
Another 7.7 million-customer breach with encrypted passwords in the haul shows that “we hashed credentials” is no longer a reputational shield. If you’re holding consumer data at this scale, you need a board-visible story on breach detection, blast radius, and rapid notification — regulators and customers now assume compromise is a when, not if.
READ THE SOURCE
MORE FROM THE WIRE
Deep & Emerging TechHonda will spend $3B on a new Ohio car plant built around hybrids
Honda’s $3B Ohio plant for 240,000 mostly hybrids a year — opening 2029 — is a bet that tariffs and consumer hesitation will keep pure EV penetration slower than the hype. Auto and mobility suppliers should not assume a straight-line EV future; hybrid-heavy lineups may stay a large, stable demand pool for at least the next product cycle.
Deep & Emerging TechQNAP says more NAS devices hit in worrying Plex2Shell malware attacks
Active Plex2Shell exploitation against more QNAP NAS devices is another reminder that edge storage is now a preferred entry point for crypto and data exfiltration. If you’re running QNAP or similar appliances, treat this as a production incident — patch, lock down remote access, and verify backups this week.
Deep & Emerging TechPQSecure Technologies Partners with Carahsoft to Distribute PQC Solutions
PQSecure tapping Carahsoft’s government channel for post-quantum crypto pushes PQC from research into procurement catalogs. If you sell into public sector or critical infra, expect RFP language to start shifting toward PQC readiness — and get your key management and upgrade paths documented now.
Deep & Emerging TechSources: a Commerce Department investigation into Megaspeed for allegedly smuggling Nvidia chips to China was transferred to the DOJ after Nvidia intervened
An alleged Nvidia-linked shift of a Commerce probe into Megaspeed over smuggled AI chips into a DOJ case underscores how export control enforcement is becoming more criminal and less administrative. If you’re in the AI hardware supply chain, treat compliance as a board-level risk — routing, resellers, and end-use checks are now prosecutable, not just fineable.