The P.J. Lhuillier Group of Companies, parent company of Cebuana Lhuillier, says it discovered a data breach in its email server that affected information of 900,000 clients.
Compromised information included birthdays, addresses and source of income. Transaction details, however, were unaffected, it says in a statement.
It says it has immediately coordinated with the National Privacy Commission to investigate the matter and assured customers that it has already implemented safety measures.