SOGO and Chow Sang Sang report data breaches affecting up to 820,000 members

Detailed summary

SOGO and Chow Sang Sang have both reported unauthorized access to their systems, with the Privacy Commissioner for Personal Data saying the SOGO incident may affect about 820,000…

SOGO and Chow Sang Sang have both reported unauthorized access to their systems, with the Privacy Commissioner for Personal Data saying the SOGO incident may affect about 820,000 members.

SOGO said it discovered in November that unauthorized parties had accessed some data in its membership system. Based on preliminary investigations, the affected data mainly involved some members' membership numbers, names, contact phone numbers, email addresses and membership points.

The company said it takes the incident seriously, has launched a full investigation, notified relevant government departments and is fully cooperating with authorities.

It said it has strengthened cybersecurity monitoring, abnormal activity detection and risk assessments, and is continuously monitoring system operations to prevent similar incidents.

SOGO urged members to stay alert, not to click on unknown links and not to disclose personal, account or verification information to third parties in response to suspicious calls, messages or emails claiming to be from the company.

The Privacy Commissioner's Office said it received a data breach notification from SOGO on Thursday. Preliminary information showed SOGO discovered abnormal data reading records in its membership system on November 5, and the incident may affect about 820,000 members' personal data, possibly including names, email addresses, phone numbers and membership points balances. It has launched an investigation.

Chow Sang Sang Group said it recently discovered unauthorized access to parts of its system, possibly involving member and employee data, first identified on Wednesday. The group said it immediately took measures to stop malicious access and strengthen system security, and engaged cybersecurity experts to investigate and advise.

The group's website was showing a "under maintenance" notice and could not be accessed.

Chow Sang Sang said it has notified the Privacy Commissioner's Office and police, and is notifying potentially affected…

Opening of the article, excerpted from The Standard. To read the rest, open the article on the publisher's site.