S&R confirms data breach

S&R, a membership-only retail warehouse, confirmed that its membership data has been compromised due to a cyber attack.

S&R has more or less 17 branches branches nationwide including Davao City, Pampanga, Cebu, Cagayan de Oro, Lipa, Iloilo, Bonifacio Global City, Congressional, and Alabang.

“We would like to inform you that S&R recently became the target of a cyber-attack. Our team acted immediately and decisively to implement our cybersecurity protocols that enabled us to resume our system operations,” S&R management said through an advisory posted on its Facebook page today, November 24. The letter was however dated November 21, 2021.

While its business was not affected and it continues to deliver a convenient and fulfilling member-customers shopping experience, S&R admitted that limited personal data of its members have been compromised.

“Limited membership data, which are confined to contact information, may have been compromised,” the S&R Membership Department said.

It also assured its members that “all our members’ credit card and other financial information are SAFE and SECURED, as these

data are protected by encryption measures as required by regulation.”

S&R condemned the cyber attack perpetuated against private companies and said it is treating this matter very seriously. “We have already reported the matter to the National Privacy Commission (NPC).”


“Rest assured that we are implementing measures to further reinforce the security of our IT system,” S&R said.

There have been numerous reports of cyber-attack not only in the Philippines, but even in the United States. Among the most common types of cybercrimes are phishing scams, internet fraud, intellectual property infringement, identity theft and cyberstalking or online harassment.

Leave a Reply

Your email address will not be published. Required fields are marked *