Cebuana Lhuillier, a Philippine financial service provider, said on Saturday that the data of 900,000 clients had been accessed without authorization and that it had already alerted authorities to investigate the incident.