Jollibee data breach may impact almost 11 million customers

Jollibee Foods Corporation (JFC) has reported a potential unauthorised access to its data, which might affect approximately 11 million customers.

The breach compromised sensitive personal information, including dates of birth and senior citizen identification numbers, according to the company’s report to the Philippines’ National Privacy Commission (NPC).

“Approximately 11 million data subjects are affected, the majority of whom are Jollibee customers,” the NPC said. “Other impacted brands include Mang Inasal, Red Ribbon, Chowking, Greenwich, Burger King, Yoshinoya, and Panda Express.”

The company has requested an additional 20 days to complete its internal investigation.

By law, companies processing personal data must notify the NPC and individual affected subjects within 72 hours of discovering a breach.

JFC said that its e-commerce platforms, including its subsidiaries, were unaffected by the incident and remained operational.

“JFC recognises the value and importance of the confidentiality of its stakeholders’ personal information,” said the company.

“The company assures the public of its commitment to prioritise the protection and confidentiality of such personal information, including customer data, by continuously fortifying its defences against future threats,” it added.