The National Privacy Commission (NPC) on Wednesday, Nov. 24, said the personal data of 22,000 S&R members were compromised following a recent cyber attack.
In a statement, NPC confirmed the receipt of a breach notification report on Nov. 15 from S&R Membership Shopping concerning a cyber attack “that may have compromised its members’ personal data.”
The S&R said they discovered the security incident last Nov. 14 and submitted a supplemental breach report to the NPC on Wednesday.
According to the report, members’ personal data, including date of birth, contact number, and gender have been compromised.
However, S&R’s data protection officer assured that credit cards and other financial information of its customers were not among the compromised personal data.