Hollys coffee chain suffers leak of 2.76 million customer records

The South Korean coffee chain Hollys reported a cyberattack that resulted in the theft of 2.76 million pieces of customer information. The breach occurred between September 3 and October 7, when unauthorized access to the company’s membership programme was detected.

The stolen data includes customer dates of birth, phone numbers, addresses, and email addresses. In a notice on its website, Hollys stated that the leaked information consists of temporary data files used for a past membership service overhaul rather than data from the currently active customer database. The company is continuing to investigate the full scope of the incident.

This breach follows a series of recent cyberattacks targeting South Korean companies, including 16 financial institutions such as KB Kookmin Bank and Shinhan Bank, which reportedly saw approximately 100,000 cases of personal information leaked earlier this month.