Jakarta, ThedailyID — PT Fore Kopi Indonesia Tbk has confirmed a data breach involving unauthorized access to one of its customer data management platforms. The company’s initial investigation found that around 5.7 million customer accounts may have been affected.
In a written statement on Wednesday (October 28), Fore Coffee said the information accessed varied by customer. Potentially exposed data includes names, email addresses, phone numbers, dates of birth, gender, registered addresses, hashed PINs, and purchase histories from the Fore app.
CEO Vico Lomar apologized to affected customers and said the company recognizes its responsibility to protect their personal information. Fore clarified that its app does not request or store national identification numbers (NIK) or photos of identity cards. Payment information, including credit and debit card details, is stored on a separate platform and was not affected by the incident.
Fore said it stopped the unauthorized access and secured the affected systems within 24 hours of identifying the activity. Its response has included security testing, fixing identified vulnerabilities, updating the platform, and adding further safeguards. The company has also appointed a cybersecurity consultant to conduct a forensic investigation, which remains ongoing.
The company has reported the incident to Indonesia’s Ministry of Communication and Digital Affairs (Komdigi) and contacted affected customers directly. Customers who receive notifications are urged to change their Fore account PINs or create one if they have not already set it up. They should also change PINs on other accounts if they use the same combination.
Fore said its app uses two-factor authentication (2FA) when users log in from a new device. The company has not found evidence of misuse of the accessed information as of the time of its statement.
However, customers should remain alert to suspicious calls, text messages, emails, and WhatsApp messages impersonating Fore. The company warned users not to share their PINs or one-time passwords (OTPs) with anyone.
Vico said Fore is focusing on assisting affected customers, completing the investigation, and strengthening its security systems and governance. The company said it would provide further updates once material information has been verified. Customers seeking assistance can contact privacy@fore.coffee.
