Privacy Unpacked
Menu

Confirmed breach

Hollys data breach

KRSouth Korea

Sports Chosun reported a data breach at Hollys (South Korea) on 23 October 2026, and it has been confirmed. It affected 2,760,000 customer records. Exposed: Personal information and Customer information.

Status
Confirmed breach
People affected
2,760,000 customer records
Reported
23 October 2026

What was exposed

  • Personal information
  • Customer information

How it happened

How
Hacking unauthorized external access to the cloud service source
Way in
cloud service unauthorized external access to the cloud service used to manage membership information source

Sources

Read our story about this breach →

If Hollys had your data

  1. Look for Hollys’s own notice or letter: it should say what of yours was involved. Keep it.
  2. Expect scams that use your details: calls, texts or emails pretending to be Hollys, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

One email to confirm first. We use your address only for this alert, and one click deletes it.

More breaches in South Korea

  1. Daishin SecuritiesKRSouth Korea · 27 October 2026 Financial account and card detailsEmail addressesPhone numbers+4 38.5Kcustomers
  2. BithumbKRSouth Korea · 27 October 2026 Email addressesPhone numbersNames+2 650employees
  3. KB Kookmin BankKRSouth Korea · 26 October 2026 Credit information 2.2Kpeople
  4. Nol UniverseKRSouth Korea · 25 October 2026 Email addressesPhone numbersMember IDs+11 –not reported
  5. SpoonKRSouth Korea · 25 October 2026 Financial account and card detailsEmail addressesPhone numbers+1 –not reported

Every breach in South Korea →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Found a mistake? Tell us and we correct it.