Chow Sang Sang data breach

Chow Sang Sang announced a data breach on Nov 12, 2026, exposing names, phone numbers, email addresses and payment card numbers. The number of people affected has not been disclosed. It was caused by a cyberattack. Hong Kong's Privacy Commissioner for Personal Data received Chow Sang Sang's notification and opened an investigation; no decision yet. No settlement or compensation has been announced.

What happened

Hong Kong jeweller Chow Sang Sang said in November 2026 that it found unauthorized access to parts of its systems, including its membership system and online shop. Preliminary findings show customer names, phone numbers, email addresses, some order details and the last four digits of card numbers may be affected, plus names, positions and work contact details of employees. It notified the Privacy Commissioner and police, which opened an investigation; the number of people has not been confirmed.

What should I do?

1. Be wary of calls, texts and emails impersonating Chow Sang Sang, banks or e-payment platforms.
2. Never give full card numbers, verification codes or passwords to anyone who contacts you.
3. Check your card statements for charges you don't recognize.

More data breaches in Hong Kong →

Check the other services you use →