The 1 Co, a prominent retail loyalty program under Central Group, has issued a public apology after a significant data breach exposed the personal information of approximately 5 million customers. The breach has raised concerns among customers, prompting the company to acknowledge the severity of the incident. The company expressed deep regret and reassured its clients that it takes such breaches seriously. In its initial statement, The 1 Co emphasized that the breach was not due to any flaws in its systems, following an investigation by its data protection officer. Despite these findings, the company remains committed to enhancing its security protocols to prevent future incidents and safeguard its customers’ data.
While the investigation found no apparent vulnerabilities within the company’s infrastructure, The 1 Co has nonetheless implemented additional security measures to strengthen its defenses. The company has pledged to work closely with both governmental and private cybersecurity experts to conduct further checks and ensure its systems meet the highest security standards. This collaborative approach aims to reassure customers that the company is doing everything it can to address the breach and protect their sensitive information moving forward.
In light of the breach, The 1 Co has issued a series of precautions to help customers protect themselves from potential misuse of their data. The company has urged affected individuals to be cautious of phishing attempts and social engineering attacks, advising them to block any communication from individuals claiming to represent The 1 Co. Customers are also advised to refrain from sharing one-time passwords (OTPs) with others, to avoid clicking on suspicious links, and to be wary of unsolicited messages. These steps are crucial to reducing the risk of further exploitation of the stolen data, especially in an environment where hackers often use such information for fraudulent purposes.
The breach has caught the attention of the Office of the Personal Data Protection Commission (PDPC) in Thailand, which has launched an investigation into the incident. Wetang Phuangsup, the acting secretary-general of the PDPC, confirmed that the commission is looking into the breach and has directed The 1 Co to conduct a comprehensive review of its security systems. The company has been given seven days to report its findings. Reports suggest that the hacker behind the breach not only attempted to extort the company by demanding a ransom but also threatened to sell the stolen data on the dark web. These developments highlight the growing risk of cybercrime in the retail and loyalty sector, underscoring the importance of robust data protection measures.
Reference: