Data breach impacts 11 million Jollibee customers, NPC announces - Manila Standard

Jollibee Foods Corp. data breach exposes 11 million customers' personal information, including sensitive data. National Privacy Commission demands accountability and protection.

Jollibee Foods Corp. (JFC), a prominent fast-food conglomerate, recently disclosed a significant data breach that compromised the personal information of approximately 11 million customers. The breach, which targeted Jollibee's data lake - a central repository for all its brands, including Jollibee, Mang Inasal, Red Ribbon, Chowking, Greenwich, Burger King, Yoshinoya, and Panda Express, raised concerns about potential identity theft and scams as sensitive data like dates of birth and senior citizen ID numbers were reportedly compromised.

The National Privacy Commission (NPC) confirmed the breach on Monday after Jollibee notified them of the incident on June 22, 2024. JFC promptly informed the stock exchange and assured the public of its commitment to prioritizing the protection and confidentiality of personal information by implementing response protocols, deploying enhanced security measures, and launching an investigation to understand the scope of the incident. The company also stated that its e-commerce platforms and those of its subsidiaries' brands were unaffected and remain operational.

In light of the breach, JFC emphasized the importance of information security practices and encouraged the public to exercise vigilance in keeping passwords secure and changing them often. The company requested an additional 20 days to finalize its internal investigation, following a similar data breach involving health maintenance organization Maxicare, which affected around 13,000 members.

The NPC stressed the significance of data security and urged the Jollibee Group to provide a comprehensive explanation of the breach and a concrete plan to protect customer information in the future. JFC's commitment to continuously fortifying its defenses against future threats and updating security measures as necessary underscores its dedication to safeguarding the personal information of its stakeholders.

Share With Others