department store

Hong Kong Sogo Member System Breach (November 2026): Member Numbers, Names, Phone Numbers, Emails and Points Affected, Company Says. What Members Should Do

Sogo Hong Kong, operated by Sogo (Hong Kong) Department Store Co., Ltd., said in an important statement on its website that in November 2026 it found that an unauthorised party had obtained some data from its member system. According to the company, its investigation so far shows the affected data mainly involves some members' member numbers, names, contact phone numbers, email addresses and membership points data. The company has reported the matter to the relevant government departments and says it is cooperating fully with their work. It says it has strengthened network security monitoring, abnormal-activity detection, detailed investigation and risk assessment, and continuing system monitoring. The statement does not give the number of members, the date of discovery or the cause. Passwords and payment card data are not among the items it lists. The company asks members not to click links of unknown origin and not to give personal data or verification details to anyone claiming by phone, SMS or email to represent Sogo. Our view: because the name, phone number and email are all affected, the main risk is convincing fake contact claiming to be Sogo.