Hollys Coffee Leak Exposes 2.76 Million Customer Data Points
Hollys coffee chain announced a cyberattack leaked 2.76 million pieces of customer personal information from temporary files used during a past service overhaul.
The South Korean coffee chain Hollys announced on Monday that a cyberattack resulted in the leak of approximately 2.76 million pieces of customer personal information. The stolen data includes phone numbers, email addresses, addresses, and dates of birth.
The breach occurred between September 3 and October 7, 2026, with the company detecting the unauthorized access on October 7. Hollys stated that the leaked data consisted of temporary files provided for a past membership service overhaul rather than the company's currently active customer database.
Owned by KG Group and operating about 530 outlets nationwide, Hollys urged customers to change their membership passwords and apologized for the incident. The company is currently investigating the exact scope of the breach. This event follows a series of recent cyberattacks in South Korea that reportedly affected 16 financial institutions.
