Circle K Hong Kong, a subsidiary of Canadian firm Alimentation Couche-Tard, experienced a network disruption that paralyzed nearly 400 outlets for days, crippling electronic payment systems, email services, and loyalty programs. While stores remained open, customers could only pay via cash or Octopus cards, leading to widespread complaints about expired loyalty points and coupons. The company acknowledged a potential cyberattack, secured customer, employee, and supplier data, and engaged law enforcement and forensic experts to investigate the breach. The incident follows a pattern of cyber threats targeting Circle K globally, including a 2024 ransomware attack on its Atlanta operations and a 2023 data exposure involving payment card details, loyalty numbers, and employee information. The disruption also coincided with a similar network outage at Convenience Retail Asia (CRA), Circle K’s former Hong Kong licensee, though a direct link remains unconfirmed. The prolonged downtime severely impacted operations, customer trust, and financial transactions, with no immediate resolution in sight as of the latest reports.