"Access for Cryptocurrency Mining"... Personal Information of 2.76 Million Hollys Customers Leaked (Roundup)

From 2009 through Feb. 11, 2020
Nine types of data, including customer passwords and addresses, exposed

Personal information belonging to 2.76 million Hollys membership customers was leaked in an external cloud hack targeting cryptocurrency mining.

In an official statement on Oct. 19, Hollys said, "We understand that some customer information was leaked when (the external attacker) accessed the cloud service abnormally to mine cryptocurrency. We are investigating the detailed circumstances."

It added, "The leaked data appears to have been a temporary data file provided for a past overhaul of the membership service, not the currently active customer database (DB." It also said that the number of leaked records reported to the Korea Internet & Security Agency (KISA) was approximately 2.76 million.

"We estimate that the data consists of cumulative customer records from 2009 through Feb. 11, 2020, including duplicate memberships," the company said, adding that it was still verifying the exact number.

Hollys confirmed on Oct. 16 that customer personal information had been leaked after an unauthorized external party accessed its membership system. At 9:36 p.m. that day, it announced the incident on its website.

The leaked information included nine categories: ID, password, name, date of birth, phone number, address, email address, duplicate membership verification information (DI), and other information related to use of the service.

Hollys estimated that the personal information was leaked over a period of about one month, from Sept. 3 through Oct. 7.

This content was produced with the assistance of AI translation services.