The privacy regulator’s preliminary estimate is that about 820,000 SOGO members may be affected by unauthorised access to the retailer’s membership system. The regulator said it received SOGO’s notification on November 12 and had opened an investigation.
SOGO said unauthorised people obtained some information from the system. The regulator said its preliminary information showed unusual data-reading records had been discovered on November 5.
SOGO said the information involved included some membership numbers, names, telephone numbers, email addresses and membership-point information.
SOGO said it had begun its own investigation, notified relevant government departments and strengthened monitoring for unusual system activity. It urged members not to disclose personal, account or verification information in response to suspicious calls, messages, emails or other contact claiming to represent the company.
The regulator advised people contacted by someone claiming to follow up on a purchased product to check the caller’s identity and claims through the merchant’s official website, customer-service hotline or a visit to a store.