Jollibee Group probes data breach

MANILA, Philippines — The Jollibee Group has begun an investigation into a cybersecurity incident that may have compromised the records of millions of customers.

In a statement, the Jollibee Group emphasized its e-commerce platforms are unaffected and remain operational.

“We take this matter seriously and have launched an investigation to better understand the scope of the incident,” it said.

The Jollibee Group said response protocols have been implemented on top of enhanced security measures to further protect its data against threats.

“Parallel to these efforts, we are working closely with relevant authorities and experts,” the group said.

“Please be assured that we are continuously fortifying our defenses against future threats and remain committed to our priority of safeguarding customer data,” it said.

Furthermore, the group urged the public to be vigilant and exercise good information security practices, including keeping passwords secure and changing them often.

Other brands under Jollibee Food Corp. are Greenwich, Red Ribbon, Burger King Philippines and Highlands Coffee.

Meanwhile, the Department of Information and Communications Technology (DICT) said it would intervene in an investigation on cybersecurity breach involving private companies only if requested to do so.

DICT Undersecretary Jeffrey Ian Dy made this clear when sought for comment on Jollibee Group’s announcement that it would investigate a recent cybersecurity breach.

“If private companies are involved, we’re usually hands off – unless they actively seek help,” Dy said.

The DICT official added it’s the National Privacy Commission (NPC) that usually deals with cybersecurity attacks involving private entities.