Hollys Confirms Leak of Members' Personal Information, Including IDs, Passwords and Addresses
IT DAILY ·
✦ AI Summary
Hollys confirmed on the 16th that its members' personal information had been leaked.
The affected users are customers who joined Hollys Membership before February 11, 2020, and the leaked items included IDs, passwords, names, dates of birth, phone numbers, addresses, email addresses, and duplicate membership verification information (DI).
The company blocked unauthorized access routes, strengthened authentication procedures and monitoring for abnormal login attempts, and advised customers to change their passwords.
Hollys sent an advisory text message to membership subscribers on the 18th after confirming a leak of members' personal information. Hollys provided the photo showing the leak.
In the text message, Hollys said personal information had been leaked through external unauthorized access, or hacking. The cause of the latest data breach was identified as hacking.
The company confirmed the leak on the 16th. It believes the breach occurred between September 3 and October 7, 2026.
The affected users are customers who joined Hollys Membership before February 11, 2020. The leaked items included IDs, passwords, names, dates of birth, phone numbers, addresses, email addresses, and duplicate membership verification information (DI).
Information related to service use was also included. The leaked items included passwords and addresses, as well as names and contact information, but the specific scale of the leak and the number of affected people have not been confirmed. Whether the passwords were encrypted has also not been confirmed.
As part of its response, Hollys said it blocked unauthorized access routes, strengthened authentication procedures and stepped up monitoring for abnormal login attempts.
It also said it has reported the incident to relevant authorities and is cooperating with the investigation. In addition, it urged customers to immediately change their membership account passwords and to change the passwords for other services using the same ID and password.
It also asked customers not to respond to phone calls, text messages or emails from unknown sources, and to refrain from clicking links from unknown sources. Hollys apologized for causing concern to customers and said it would do its utmost to protect customer information and minimize losses.
Source: IT DAILY · Kim Ho-jun
Original: https://www.itdaily.kr/news/articleView.html?idxno=242266
References
This article was produced with the help of an automated content generation algorithm.
Source: IT DAILY
View originalThis article was summarized and organized by BizCrush based on the original article from IT DAILY. For exact quotations and full details, please refer to the original article.