Now Hacked
EN-GB
Data breach

Hollys membership hack exposes 2.76 million customer personal data records

First reported · Last reported · 36 related reports

Unauthorised external access to Hollys’ membership system exposed approximately 2.76 million customer personal data records. The exposed information included user IDs, passwords, names, dates of birth, phone numbers, addresses, email addresses and duplicate registration verification information. The breach occurred in temporary files used for a system revamp, and Hollys apologised and asked customers to change their passwords.

Key facts

Affected organisation
Hollys
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
Approximately 2.76 million customer personal data records
Cause / method
Unauthorised external access to the membership system exposed personal information in temporary files used for a system revamp.
Location
South Korea

If your data was exposed

View Hollys notice ↗

Exposed dataUsernamePasswordNameDate of birthPhone numberAddressEmail

  1. Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
  2. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
  3. If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗

Lookup and notice links are official pages found by AI. Make sure the address is on the organisation’s official domain before using it.

Timeline

  1. The exposure of personal information, including passwords and addresses, belonging to Hollys membership customers was reported.
  2. The scale of the breach was reported as 2.76 million records, and Hollys apologised and asked customers to change their passwords.
  3. It emerged that the breach occurred in temporary files used for a system revamp and that the statutory reporting deadline had been exceeded.

36 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.