Hollys Coffee says 2.76m customer records stolen in hack
South Korean coffee chain Hollys confirmed hackers stole about 2.76 million sets of customer records from its membership system between September and October, blaming a cryptocurrency-mining intrusion.
South Korea’s Hollys Coffee confirmed on Oct 19, 2026 that hackers accessed its membership system between Sept 3 and Oct 7, stealing about 2.76 million sets of customer personal information, Yonhap News Agency reported.
The stolen data includes IDs and passwords, names, dates of birth, phone numbers, addresses and emails of customers who signed up before Feb 11, 2020, Chosun Biz reported. Hollys says the leak came from temporary files retained from a past membership-service overhaul — data accumulated from 2009 to Feb 2020, including duplicates — not the active database. The company said it suspects the hacker entered through an abnormal route used for cryptocurrency mining, blocked it, strengthened authentication and reported to the Korea Internet & Security Agency (KISA).
“We sincerely apologize for causing customer concern from this incident. We will make our utmost efforts to protect customer data and minimize damage from the breach,” the company said in a website notice. Hollys urged customers to change their membership passwords and those of any other services using the same credentials, warned against clicking links from unknown sources, and said it would suspend the cloud-based membership service and run a full security inspection.
The breach is the latest in a wave of cyberattacks on South Korean companies. Financial regulators say around 100,000 cases of leaked personal information are suspected at 16 financial institutions in recent attacks, according to Yonhap and The Korea Times. Hollys runs around 530 outlets and is owned by KG Group.
Read next
More on this topic: all Business stories
