Chow Sang Sang says client and staff data may have been accessed in cyber attack
Jewellery group Chow Sang Sang reported an unauthorised system access, with potential exposure of client and employee data. The company has engaged cybersecurity experts, notified Hong Kong's privacy watchdog and police, and is contacting affected individuals.
Chow Sang Sang, the Hong Kong-based jewellery and watch retailer, has disclosed that its computer systems were subjected to unauthorised access, potentially exposing the personal data of some customers and employees. The company announced on 12 November that it first identified the incident on Monday of this week, though the full extent of the data extraction remained under verification.
In a statement, Chow Sang Sang said the compromised systems included its membership database and official e-commerce channels. The group said it had immediately taken steps to halt all unauthorised access and to strengthen system security. It has also commissioned an external cybersecurity firm to conduct a full investigation and to advise on remedial measures.
The company has notified relevant authorities, including the Office of the Privacy Commissioner for Personal Data (PCPD) and the Hong Kong Police. Chow Sang Sang added that it is in the process of contacting potentially affected customers and employees to inform them of the breach.
“The investigation is still ongoing,” the group said, adding that it would continue to cooperate with the authorities and monitor the situation closely. The company pledged to take appropriate steps to fully investigate the incident, provide remedies and minimise any potential harm caused by the breach.
The disclosure comes as Hong Kong regulators have stepped up scrutiny of data security practices following a series of high-profile cyber attacks on local firms. The PCPD has previously warned businesses to adopt stronger safeguards for personal information.
