SOGO and Chow Sang Sang Report Data Breaches Affecting 820,000 Members Combined
Thestandard · 2 SOURCESabout 3 hours ago2 MIN

Summary
SOGO and Chow Sang Sang have reported separate data breaches that may have compromised the personal information of up to 820,000 members combined. The Privacy Commissioner for Personal Data confirmed that the SOGO incident alone may affect approximately 820,000 members. SOGO detected abnormal data reading records in its membership system on November 5, while Chow Sang Sang discovered unauthorized system access on Wednesday. Both companies have notified the Privacy Commissioner's Office and law enforcement agencies, and are working with cybersecurity experts to investigate the incidents.
Key Points
- SOGO discovered unauthorized access to its membership system on November 5, with affected data including membership numbers, names, phone numbers, email addresses, and membership points balances
- The Privacy Commissioner's Office received SOGO's data breach notification on Thursday and has launched an investigation into the incident affecting approximately 820,000 members
- Chow Sang Sang Group identified unauthorized access to parts of its system on Wednesday, potentially involving both member and employee data
- Chow Sang Sang immediately halted malicious access, engaged cybersecurity experts, notified the Privacy Commissioner's Office and police, and placed its website under maintenance
- Both companies have strengthened cybersecurity measures, including monitoring, abnormal activity detection, and risk assessments, while urging members to remain vigilant against suspicious communications
Why It Matters
These back-to-back breaches highlight the growing cybersecurity vulnerabilities facing Hong Kong's retail sector and the importance of robust data protection measures. With nearly a million combined members potentially affected, the incidents underscore the urgent need for businesses to fortify their digital infrastructure against increasingly sophisticated cyber threats .
These back-to-back breaches highlight the growing cybersecurity vulnerabilities facing Hong Kong's retail sector and the importance of robust data protection measures. With nearly a million combined members potentially affected, the incidents underscore the urgent need for businesses to fortify their digital infrastructure against increasingly sophisticated cyber threats .