Customer passwords, addresses, and other details leaked for those who joined membership before February 11, 2020

Personal information of customers has been leaked due to a hacking incident targeting the membership system of the coffee chain Hollys.

According to the coffee industry on the 19th, Hollys confirmed that an unauthorized external access occurred to its membership system on the 16th, resulting in the leakage of customer personal information. The company posted a notice regarding this on its official website around 9:36 PM on the same day.

Hollys urged customers, "Please immediately change your membership account password," and added, "Please also change passwords for other services that use the same ID and password."

The company further emphasized, "Do not respond to or click links in phone calls, text messages, or emails from unknown sources," noting that "Hollys does not send links via text message, nor do we request passwords, financial, or payment information."

"We deeply apologize for causing concern to our customers due to this incident," the company stated, adding, "We will do our utmost to protect customer information and minimize potential damage."

Customers affected by the data leak are those who signed up for the Hollys membership prior to February 11, 2020.

However, specific details—such as the exact number of victims and whether the leaked information has been maliciously exploited externally—were not disclosed in the notice.

The leaked items include IDs and passwords, names, dates of birth, phone numbers, addresses, emails, duplication information (DI), and other service usage data.

Amid a recent series of personal information leak incidents at various corporations, the leakage of customer data from an everyday coffee chain is expected to heighten consumer anxiety.

On the previous day, Hollys' mobile and PC websites experienced temporary service outages.

Hollys estimates that the personal information leakage occurred due to external hacking between August 3 and September 7.

The company stated that it has blocked unauthorized access routes, strengthened authentication procedures, and enhanced monitoring against abnormal login attempts. It also reported the incident to relevant authorities and is cooperating with the investigation.

[ⓒ Global Economic Times. 무단전재-재배포 금지]