“Phone numbers and addresses of 2.76 million people all exposed” ... Hollys customer data leaked in hack

[Financial News] Customer personal information was leaked in a hack of the membership system of coffee chain Hollys. The total number of people affected was confirmed to be 2.76 million.
According to industry sources on the 19th, Hollys confirmed that customer personal information had been leaked following an external hacking attack on its membership system and sent out notification text messages.
Hollys detected unauthorized external access to its membership system on the 16th and launched an investigation. The company believes customer information was taken in a hacking attack between the 3rd of last month and the 7th of this month.
The leaked information included user IDs and passwords, names, dates of birth, phone numbers, addresses, email addresses, duplicate membership verification information (DI), and information related to use of the service.
Hollys said, “Immediately after the incident, we took emergency response measures, including blocking unauthorized access routes to the service, strengthening authentication procedures, and increasing monitoring of abnormal login attempts,” adding, “We have completed the reporting process through the relevant authorities and plan to actively cooperate with their investigation.”
The leaked data did not involve currently active records, but rather those of customers who had joined Hollys membership before February 11, 2020; the total was 2.76 million records. Hollys will continue to assess the possibility of further harm and plans to promptly discontinue the membership service that uses the cloud in question.
A Hollys representative said, “We sincerely apologize for causing our customers concern with this incident,” adding, “We will do our utmost to protect customer information and minimize harm.”
[email protected] Park Kyung-ho Reporter