Hollys coffee chain leaks data of 2.76 million loyalty members

Hackers breached the cloud server of South Korean coffee chain Hollys and stole about 2.76 million loyalty records. The unauthorized access occurred between September 3 and October 7, 2026, and was motivated by cryptocurrency mining. Exposed data includes logins, passwords, names, birth dates, phone numbers, addresses and emails.

• About 2.76 million records leaked, including duplicates
• Data accumulated from 2009 to February 11, 2020
• Leaked fields include logins, passwords, phones and addresses
• Hollys is shutting down the cloud loyalty service and urges password changes