Customer personal information was leaked due to unauthorized external access to HOLLYS’ membership system.
HOLLYS said on the 18th that it confirmed the personal information leak on the 16th. The leak is presumed to have occurred in a hacking incident between Mar. 3 and Apr. 7. The targets are customers who signed up for membership on or before Feb. 11, 2020.
The leaked items include user IDs and passwords, names, dates of birth, phone numbers, addresses, emails, duplicate subscription verification information (DI), and information related to service use. HOLLYS said it blocked the path of unauthorized access and strengthened authentication procedures and abnormal login monitoring. It also said it reported the incident to the relevant authorities and is cooperating with the investigation.
HOLLYS urged customers to immediately change their membership passwords and to change the passwords of other services that use the same user ID and password. It also told customers not to respond to or click links in phone calls, text messages, or emails of unclear origin.
※ This article has been translated by AI. Share your feedbackhere.
