Hollys says 2.76 million pieces of customer data leaked in cyberattack

The stolen data included customers' dates of birth, phone numbers, addresses and emails, according to a notice posted on the company's website. Hackers accessed the system sometime between Sept. 3 and Oct. 7, when the company detected unauthorized access.

The company said in the notice that the leaked data appeared to consist of temporary data files provided for a past membership service overhaul, rather than data from the currently active customer database. It added that it was still investigating the exact scope of the incident.

"We sincerely apologize for causing customer concern from this incident. We will make our utmost efforts to protect customer data and minimize damage from the breach," the notice said.

The Hollys breach followed back-to-back leaks of customer data at local financial firms earlier this month. As of Friday, around 100,000 cases of leaked personal information were presumed to have occurred at 16 financial institutions in a recent series of hacking attacks, according to financial regulators.

Hollys currently operates around 530 outlets across the country. The chain is owned by KG Group, a local conglomerate whose business ranges from steelmaking to car manufacturing and logistics services.

Editor's Summary

Hollys reported that 2.76 million pieces of customer information were leaked in a cyberattack between Sept. 3 and Oct. 7, and said the affected files were temporary data from a past membership service overhaul. The incident follows presumed leaks of about 100,000 personal information cases at 16 local financial institutions. Hollys, which has around 530 outlets and is owned by KG Group, said it is investigating the scope of the breach.