Chow Sang Sang discloses unauthorized access to customer and employee data
Chow Sang Sang says an intruder accessed some customer and employee records. Its preliminary findings identify the membership system and official online sales channels. The group is checking whether data was taken.
- Disclosed
- Nov 12, 2026
- Public disclosure date
- Severity
- Sharted
- No CVE: a breach, not a bug
- Splash zone
- Chow Sang Sang customers and employees whose records were accessed. The group is notifying potentially affected people.
- Chow Sang Sang · retail · data exposure
- In the wild
- Yes
- The company confirmed unauthorized access to some customer and employee records.
What happened
The company says some customer and employee information, including personal data, was accessed. Its filing identifies the membership system and official e-commerce channels among the affected systems. The number of people, specific data fields, entry point and extent of any extraction remain under investigation.
Crime-scene timeline
Nov 9, 2026
The group detects unauthorized access
Its November 12 filing says it first identified the incident on November 9.
Nov 12, 2026
Chow Sang Sang files a preliminary disclosure
It had taken containment measures, retained security specialists and notified Hong Kong privacy and police authorities. Notifications to potentially affected customers and employees were underway.
Who said what
We list each claim and who made it. Primary sources (the vendor, the researcher, the registry) are marked. Where reports disagree, we grade by the worst credible case.
- Chow Sang Sang disclosure filed with HKEXPrimaryConfirms unauthorized access, names affected systems and describes the investigation and notification process.