“Phone numbers and home addresses exposed too” ... Hollys customer data leaked in external hack

[Financial News] A customer data breach caused by an external hack occurred at coffee chain Hollys. The exposed information included IDs, passwords and addresses, and the extent of the breach has not yet been disclosed.
On the 16th, Hollys disclosed on its official website that customers’ personal information had been exposed in a post titled “Apology and Notice Regarding the Personal Information Breach.”
Hollys said, “We are notifying you that we confirmed on October 16, 2026, that your personal information had been exposed following unauthorized access to our membership system,” adding, “We believe the information was exposed through unauthorized external access (hacking) between September 3 and October 7, 2026.”
Those affected were customers who joined Hollys’ membership program before February 11, 2020. It was confirmed that exposed information included IDs, passwords, names, dates of birth, phone numbers, addresses, email addresses, duplicate membership verification information (DI), and other information related to use of the service.
Hollys later sent a text message containing these details to its membership customers on the 18th.
Hollys said it had blocked unauthorized access routes, strengthened authentication procedures and increased monitoring for abnormal login attempts. It also reported the incident to the relevant authorities and is cooperating with their investigation.
Hollys urged customers to “change the password for your Hollys membership account immediately” and to “also change the passwords for other services where you use the same ID and password.”
It went on to emphasize, “Do not respond to calls, text messages or emails from unverifiable sources or click on links,” adding, “Hollys does not send links by text message or ask for passwords or financial or payment information.”
It added, “We sincerely apologize for the concern this incident has caused our customers,” and, “We will do our utmost to protect customer information and minimize the damage.”
[email protected] Kim Su-yeon Reporter