Over 900,000 affected by Cebuana Lhuillier data breach

Arianne Merez, ABS-CBN News

MANILA (2nd UPDATE)—More than 900,000 clients of Cebuana Lhuillier were affected by a breach that may have compromised their personal data, the local pawnshop said Saturday.The figure represents about 3 percent of its total clientele, Cebuana Lhuillier said.Information that could have been compromised includes birth dates, addresses, and sources of income, the company said in a statement.<ul class="op-related-articles">	<li><a href="https://news.abs-cbn.com/business/01/19/19/cebuana-lhuillier-bares-data-breach-tells-clients-to-secure-accounts">Cebuana Lhuillier bares data breach, tells clients to secure accounts</a></li></ul>It, however, noted that transaction details or information were not compromised and that the pawnshop&#x27;s main servers &quot;remain safe and protected.&quot;<div class="embed-wrap"><figure data-feedback="fb:likes,fb:comments"><img src="http://sa.kapamilya.com/absnews/abscbnnews/media/2019/news/01/19/cebuana_1.jpg"/></figure></div>The pawnshop earlier said attempts to use one of its servers were detected last Tuesday, January 15, but that unauthorized downloads from its servers took place on August 5, 8, and 12, 2018.Affected clients have already been notified and the data breach has been reported to the National Privacy Commission (NPC) for investigation, Cebuana Lhuillier said.&quot;We are committed to ensuring the data privacy of our clients and adhere to strict security protocols in protecting our interests,&quot; it said. &quot;We will provide additional information regarding the incident as soon as it becomes available.&quot;The NPC is investigating the incident, privacy commissioner Raymond Liboro said Saturday. &quot;Cebuana Lhuiller has 72 hours from discovery of a data breach to report the same to the Commission and affected data subjects. The data subject notification must be done individually, and not further expose the data subject to more harm,&quot; Liboro said in a statement.In a meeting with the NPC last Thursday, Cebuana Lhuillier said it engaged the services of a third party information security service provider to &quot;handle their mitigation and response to this incident.&quot;The pawnshop also committed to submit a more detailed report of the breach to the NPC.Cebuana Lhuillier is the Philippines&#x27; largest non-bank financial service provider, specializing in pawning, remittance, and micro-insurance.In 2017, the company reported that its loyalty program already has more than 9 million members nationwide.

Around 900,000 clients of Cebuana Lhuillier were affected by a data breach that may have compromised their personal data.

Around 900,000 clients of Cebuana Lhuillier were affected by a data breach that may have compromised their personal data.

Over 900,000 affected by Cebuana Lhuillier data breach | ABS-CBN

Halalan 2025

Entertainment

News

Metro.Style

Sports

More

Business

Over 900,000 affected by Cebuana Lhuillier data breach

Over 900,000 affected by Cebuana Lhuillier data breach

Arianne Merez,

ABS-CBN News

Published Jan 19, 2019 12:55 PM PHT

|

Updated Jan 19, 2019 07:29 PM PHT

Read More:

Cebuana Lhuillier

pawnshop

data breach

data privacy

National Privacy Commission

NPC

ABS-CBN is the leading media and entertainment company in the Philippines, offering quality content across TV, radio, digital, and film. Committed to public service and promoting Filipino values, ABS-CBN continues to inspire and connect audiences worldwide.

Corporate

Investors

Governance

International Distribution

Corporate

Governance

Investors

International Distribution

NPC Seal of Registration

Privacy Policy

AI Policy

Terms of Service

Advertise with Us

© 2025 ABS-CBN Corporation. All Rights Reserved.

NPC Seal of Registration

Privacy Policy

Terms of Service

AI Policy

Advertise with Us

© 2025 ABS-CBN Corporation. All Rights Reserved.

NPC Seal of Registration

Privacy Policy

Terms of Service

AI Policy

Advertise with Us

© 2025 ABS-CBN Corporation. All Rights Reserved.