Sogo Hong Kong reports data breach affecting up to 820,000 members
Sogo Hong Kong says its membership system was accessed without authorisation, potentially affecting 820,000 members. The company has notified authorities and launched an investigation. The Office of the Privacy Commissioner has begun a probe.
Sogo (Hong Kong) Department Store Limited has announced that its membership system was accessed without authorisation this month, potentially exposing data belonging to up to 820,000 members. The company said the affected information includes member numbers, names, telephone numbers, email addresses and reward points data.
Sogo said it takes the matter very seriously and has immediately launched a full investigation and follow-up procedures. The company has notified the relevant government departments and is co-operating fully with their inquiries.
The retailer apologised for any inconvenience caused to its members and said it has taken a series of remedial measures. These include upgrading its cybersecurity monitoring system, enhancing detection of anomalous activity, conducting detailed investigations and risk assessments, and continuously monitoring system operations to prevent a recurrence.
Hong Kong's Office of the Privacy Commissioner for Personal Data confirmed it received a notification from Sogo on Thursday and has begun an investigation under its established procedures. The watchdog said the incident could affect approximately 820,000 members' personal data.
Sogo Hong Kong operates two department stores in the city, in Causeway Bay and Tsim Sha Tsui, and runs a loyalty programme with about 820,000 enrolled members.
