Jollibee Foods Corporation (“JFC” or the “Company”) today announced its notification on a cybersecurity incident involving a personal data breach that was recently reported, affecting the Company and a number of its subsidiaries. JFC has submitted the necessary notification on this matter to the National Privacy Commission.

The Company is addressing the incident and has implemented its response protocols and deployed enhanced security measures to further protect the Company’s and its subsidiaries’ data against threats. The Company has also launched its investigation on the matter to understand the scope of this incident, and is currently working with the relevant authorities and experts in its investigation.

JFC confirms that its e-commerce platforms and those of its subsidiaries’ brands are unaffected by this incident and remain operational.

JFC recognizes the value and importance of the confidentiality of personal information of its stakeholders. The Company assures the public of its commitment to prioritize the protection and confidentiality of such personal information, including customer data, by continuously fortifying its defenses against future threats.

The Company further assures the public that it continues to monitor and update its security measurements as appropriate under the circumstances, and as may be required by the results of its investigation into this matter. The Company also wishes to encourage the public to exercise vigilance in information security practices, including keeping passwords secure and changing them often.