SOGO Hong Kong data breach
SOGO Hong Kong announced a data breach on Nov 12, 2026 affecting about 820,000 people, exposing names, phone numbers and email addresses. It was caused by a cyberattack. Hong Kong's Privacy Commissioner for Personal Data received SOGO's breach notification and opened an investigation in November 2026; no decision yet. No settlement or compensation has been announced.
Was I affected?
SOGO Hong Kong loyalty members; the privacy commissioner puts the number at about 820,000.
| Announced | Nov 12, 2026 |
|---|---|
| When it happened | Abnormal data access found November 5, 2026 |
| Country | Hong Kong |
| People affected | 820,000 |
| Data exposed | Names, Phone numbers, Email addresses and Other details |
| Status | Confirmed by the company or a regulator filing |
What happened
Hong Kong department store SOGO said on November 12, 2026 that unauthorized parties had accessed its membership system and obtained member numbers, names, phone numbers, email addresses and membership point balances. Hong Kong's Privacy Commissioner for Personal Data said SOGO found abnormal data reading in the system on November 5 and that about 820,000 members may be affected; the commissioner has opened an investigation. Jeweller Chow Sang Sang reported a separate breach the same day.
What should I do?
- Be wary of calls, texts and emails that claim to be from SOGO or mention your membership points, and don't click links in them.
- Never give account details, passwords or verification codes to anyone who contacts you; check through SOGO's hotline +852 2833 8338 or csteam@sogo.com.hk.
- Check your SOGO membership points for redemptions you did not make.
- Report suspected fraud to the Hong Kong Police and keep records of suspicious messages.
Regulator action, and how Korea compares
SOGO Hong Kong: Hong Kong's Privacy Commissioner for Personal Data received SOGO's breach notification and opened an investigation in November 2026; no decision yet. (checked Nov 13, 2026; source)
For comparison, Korea's privacy regulator fined Dior Korea ₩12.2 billion (about US$8M) in February 2026 over a breach of 1.95 million people. Korean law fines the security failure itself, not only misuse of the data.
More data breaches in Hong Kong →
Check the other services you use →
Sources
- 820,000 Sogo members at risk as department store, Chow Sang Sang hit by data breaches · South China Morning Post · news
- SOGO and Chow Sang Sang report data breaches affecting up to 820,000 members · The Standard · news
- 崇光百貨82萬會員資料外洩涉姓名及電話號碼等 私隱署展開調查 (SOGO data leak affects 820,000 members; privacy office investigates) · TVB News (in Chinese) · news