The privacy watchdog said the breach at Hong Kong Airlines affected 815 passengers travelling between September 29 and October 22, involving their names, phone numbers and flight information.
The Yoho Hong Kong breach affected 790 customers who placed their orders between September 29 and October 12, involving their names, phone numbers along with delivery information.
The watchdog said customers received suspected scam calls stating their personal data.
Additionally, the privacy commissioner received a data-breach incident report from Broadway Photo Supply.
As of Monday, it had received a total of 23 complaints and 20 inquiries, and investigations have been launched.
The office urged people to consider carefully should they have any doubts about callers claiming to be merchants, and verify their identities and authenticity of the calls through official channels.
Customers should also refuse any suspicious money-transfer requests and keep records of communications.
