Cebuana Lhuillier alerts clients on data breach

Cebuana Lhuillier, money remittance and lending company, on Saturday said personal information of its customers may have been compromised following a data breach incident.

Cebuana Lhuillier

Big data breach!

In an email to its customers, the firm said names, birth dates, email addresses, mobile numbers, and income information may have been "exposed".

Cebuana Lhuillier said it detected four days ago, January 15, suspicious attempts "to use one of our email servers as a relay to send out spam to other domains," the advisory read.

Follow-up investigation resulted in the discovery of unauthorized downloading of contact lists used as recipients for email campaigns. These unauthorized downloads took place on August 5, 8, and 12, 2018, it added.

The affected server has been halted amid the data breach. Cebuana Lhuillier also said it already informed the National Privacy Commission on the incident.

Customers have been advised to change their passwords across multiple accounts. Cebuana Lhuillier also urged them to create unique passwords for a strong online security.

Source: ABS-CBN