Privacy Commissioner Probes Data Breaches, Warns of Sophisticated Scams Targeting Victims
HK01 · 8 SOURCESabout 3 hours ago2 MIN
Summary
The Personal Data Privacy Commissioner's Office (PCPD) is investigating multiple data breach incidents reported by airlines and electronics retailers, with the public urged to stay alert against sophisticated scams targeting affected customers. As of October 30, the office has received 51 complaints and 48 inquiries related to the breaches, with individual financial losses ranging from approximately HK$10,000 to over HK$1.5 million .
Key Points
- Five companies have reported data breaches: Hong Kong Airlines, Cathay Pacific, Malaysia Airlines, Yoho Hong Kong, and Broadway .
- The PCPD has received a total of 99 reports (51 complaints and 48 inquiries) as of late October, with losses ranging from HK$10,000 to over HK$1.5 million .
- Scammers are using leaked personal data to craft convincing phishing messages or emails, impersonating company staff to offer fake refunds .
- The public should verify identities through official websites, customer hotlines, or in-store visits before sharing any sensitive information .
- The PCPD advises that legitimate refund or compensation processes never require advance payments of "deposits" or "handling fees" .
Why It Matters
These data breaches highlight the growing cyber security vulnerabilities facing Hong Kong businesses and consumers alike. With fraudsters employing increasingly sophisticated tactics using stolen personal information, the incidents underscore the urgent need for both businesses to strengthen their data protection measures, particularly when engaging third-party service providers, and for individuals to adopt defensive practices such as enabling multi-factor authentication and scrutinizing all unsolicited communications claiming to offer refunds or account services .
These data breaches highlight the growing cyber security vulnerabilities facing Hong Kong businesses and consumers alike. With fraudsters employing increasingly sophisticated tactics using stolen personal information, the incidents underscore the urgent need for both businesses to strengthen their data protection measures, particularly when engaging third-party service providers, and for individuals to adopt defensive practices such as enabling multi-factor authentication and scrutinizing all unsolicited communications claiming to offer refunds or account services .