Hong Kong jeweller Chow Sang Sang investigates possible customer and employee data leak
Hong Kong jeweller Chow Sang Sang discovered unauthorised access to systems including its membership system and official e-commerce channels on 9 November. It is investigating whether customer contact details, order information, the last four digits of card numbers, and employee information were exfiltrated, and the number of people affected has not been determined. It is conducting an investigation with external experts and updating and upgrading its membership system, and has reported the incident to Hong Kong’s privacy regulator and police.
Key facts
- Affected organisation
- Chow Sang Sang
- Incident type
- Data breach
- Occurred / detected
- 2026-11-09
- Scale of damage
- Possible exposure of customers’ and employees’ personal information; number of people affected undetermined
- Cause / method
- Unauthorised access to systems including the membership system and official e-commerce channels
- Location
- Hong Kong SAR China
If your data was exposed
Exposed dataUsage & purchase historyCard details
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
- Turn on payment alerts in your card issuer’s app, and if you see a charge you don’t recognise, ask the issuer to block and reissue the card.
Timeline
- Unauthorised access targeting the membership system, official e-commerce channels, and other systems was first identified.
- The company disclosed possible exfiltration of customer and employee information, launched an investigation with external experts, and reported the incident to the relevant authorities.
- The company updated and upgraded its membership system while continuing to investigate whether information had leaked and the extent of the impact.
13 related reports
- Hong Kong jeweler Chow Sang Sang warns of possible customer and employee data leak
- Chow Sang Sang data breach potentially exposes customer, employee information
- Chow Sang Sang says client and staff data may have been accessed in cyber attack
- [HK]周生生(00116):内幕消息 – 资料安全事件
- Chow Sang Sang reports unauthorised access to its systems
- 周生生遭遇网络数据安全事件：客户及员工资料或遭泄露
- 系统遭未授权存取、客户员工资料有泄露风险，周生生回应
- 周生生（チャウ・サン・サン）会員システムに不正アクセス、顧客・従業員の個人情報流出リスク
- 周生生公告客户资料可能外泄 信息泄露事件调查中
- 客户信息可能泄露，周生生恐面临合规处罚，港股低开超2%
- 周生生客户资料或遭泄露，正更新升级会员系统！称仍在调查
- 股价跌超4%！周生生公告：系统遭未授权存取、客户员工资料有泄露风险
- 周生生会员系统数据疑泄露 客户资料可能被提取
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.