Finance.Biggo Hollys Coffee Membership Data Breach Exposes Customer Information
Article Content
- •Hollys Coffee confirmed a data breach affecting customer membership information.
- •Compromised data includes sensitive information like passwords and addresses.
- •Customers are urged to change passwords and remain vigilant against phishing.
Hollys Coffee, a South Korean coffee franchise, confirmed a data breach affecting its membership system, which exposed personal information of customers who joined before February 11, 2020. The breach was confirmed on October 16, 2026, and is believed to have occurred between September 3 and October 7, 2026. Compromised data includes user IDs, passwords, names, dates of birth, phone numbers, addresses, and email addresses. The company has blocked unauthorized access and enhanced security measures while cooperating with investigations. Customers are advised to change their passwords immediately and to be cautious of phishing attempts. The exact number of affected customers has not been disclosed, raising concerns about potential identity theft and fraud. Hollys Coffee's mobile app and website remain inaccessible as of October 18, 2026.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Hollys in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Who is affected by the breach?
What information was leaked?
What actions should customers take?
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting…