6th October 2025 – (Hong Kong) Circle K Hong Kong has formally concluded its investigation into last month’s network disruption, confirming that no customer, partner, or employee data was compromised during the cybersecurity incident that temporarily disabled its electronic payment systems.
In an official statement released on Monday, the convenience store chain affirmed that comprehensive independent forensic analysis found “no evidence of data – personal or otherwise – being stolen, accessed or misused” throughout the security breach. The announcement brings resolution to the episode that initially emerged in late September 2025, when the company suspended all electronic payments except Octopus transactions across its 400 locations.
The retailer detailed significant security enhancements implemented since the incident, including strengthened access controls, upgraded monitoring systems, and additional authentication protocols. These measures supplement the company’s existing cybersecurity framework, with Circle K emphasising its commitment to regular security assessments and systematic updates.
While maintaining all store operations throughout the disruption, the company temporarily suspended multiple services including parcel collection, e-wallet top-ups, bill payments, and its membership rewards programme. The chain has extended apologies for any inconvenience caused, acknowledging customer patience during the restoration process that involved both internal IT teams and external cybersecurity specialists.
