NPC: 11M subjects affected in Jollibee data breach

Some 11 million data subjects were affected by an unauthorized access to the Jollibee Group’s data, which is currently being investigated by the fast food giant.

According to the National Privacy Commission (NPC) on Monday, it was notified by the Jollibee Group of a possible unauthorized access to its data on Saturday morning, compromising sensitive personal information such as dates of birth and senior identification numbers.

“Approximately 11 million data subjects are affected, the majority of whom are Jollibee customers. Other impacted brands include Mang Inasal, Red Ribbon, Chowking, Greenwich, Burger King, Yoshinoya, and Panda Express,” the NPC said.

Jollibee Foods Corp. (JFC), which over the weekend said it is looking into the matter, has requested an additional 20 days to complete its internal investigation.

The group earlier said it has implemented response protocols, in addition to enhanced security measures as it assured that its e-commerce platforms have not been affected and will remain operational.

The Department of Information and Communications Technology (DICT), for its part, on Saturday said that while its Cyber Security Bureau has monitored the situation and has tried to communicate with Jollibee, no response has been received.

“We reiterate, that although DICT is the technical Consultant of Government, it cannot force and has no coercive powers over private entities to respond to us even in reported case of data breach or hacking, except in cases involving national security,” DICT assistant secretary Renato Paraiso said in a separate message to reporters.

JFC has earmarked up to P23 billion for its capital expenditures this year, with the company planning to open as many as 750 owned and franchised stores.

The company operated 6,902 stores across the globe as of February 29, 2024 — 3,336 in the Philippines, and 3,566 overseas. Its brands consist of Highlands Coffee, Coffee Bean and Tea Leaf, Milksha, Jollibee, Chowking, and Mang Inasal. —KBK, GMA Integrated News