Key facts
- The Office of the Privacy Commissioner for Personal Data said 820,000 Sogo members may be affected by the breach.
- Sogo said it alerted authorities a week before the commissioner disclosed the figures.
- Preliminary findings indicate names, email addresses and phone numbers may be among compromised records.
Hong Kong's Office of the Privacy Commissioner for Personal Data said on November 12, 2026 that personal information of 820,000 members of Sogo, the city's largest department store chain, may have been exposed in a data breach. The disclosure came hours after Sogo said it had alerted authorities a week earlier to abnormal data access within its membership system.
Preliminary findings indicate that compromised records may include members' names, email addresses and phone numbers, according to the commissioner's office. The report did not state how the access occurred or name any party responsible.