5.7 Million Customer Accounts Exposed; Fore Coffee CEO Apologises
Data from 5.7 million customer accounts at PT Fore Kopi Indonesia Tbk (FORE), or Fore Coffee, has been exposed. Unauthorised parties accessed a range of information, including customers’ names, telephone numbers, email addresses, home addresses and purchase histories in the Fore app.
Vico Lomar, chief executive of PT Fore Kopi Indonesia Tbk, apologised to customers over the incident. Fore Coffee said it had conducted security testing, fixed vulnerabilities, updated the relevant platform and put additional safeguards in place.
“We understand the concern caused by this incident and sincerely apologise to the customers affected. Protecting customer data is our responsibility,” Vico said, as quoted by detikInet on Thursday (29 October 2026).
PT Fore Kopi Indonesia Tbk said it had stopped the illegal access and secured the systems concerned within 24 hours of identifying suspicious activity.
“Immediately after the unauthorised activity was identified, FORE took steps to stop the access and secure the relevant systems within 24 hours,” the company said in a statement on Wednesday (28 October 2026), as quoted by detikInet.
The company has also appointed an independent cyber-security consultant to conduct a forensic investigation. It has reported the incident to the Ministry of Communication and Digital Affairs (Komdigi).
Data exposed
Fore Coffee said the types of data affected vary from customer to customer. Information that may have been exposed includes names, email addresses, telephone numbers, dates of birth, gender, registered addresses, hashed PINs and purchase histories. The company said it had found no indication that the data accessed by unauthorised parties had been misused.
PINs stored using hashing are not held as plain text. However, hashing does not eliminate the risk of misuse entirely, so customers are still advised to change their PINs.
Fore Coffee said its app has never asked for or stored customers’ national identity numbers (NIK) or photographs of their identity cards (KTP). Payment information, including credit and debit card numbers, was also not affected, the company said, as it is stored on a separate platform.
Customers urged to change PINs
Fore Coffee has begun contacting affected customers directly and asking them to change their app PINs as soon as possible. Customers who have not set a PIN are also advised to create one.
If customers use the same PIN for other services, they should change it there as well. Fore Coffee has also introduced two-factor authentication (2FA) for log-ins from new devices.
Customers should be alert to scams sent by SMS, WhatsApp, email or telephone calls purporting to be from Fore Coffee. The exposed personal information could be used to make phishing messages or scams appear convincing.
The company warned customers not to disclose their PINs or one-time passcodes (OTPs), or click on suspicious links requesting account information. Customers needing assistance can contact privacy@fore.coffee. Fore Coffee said it would provide further updates once the investigation’s findings had been verified.