Debt collector arrested over doxxing 15 alleged debtors
HK01 · 4 SOURCES1 day ago2 MIN

Summary
Hong Kong’s Office of the Privacy Commissioner for Personal Data said it arrested a 20-year-old man in Kowloon on November 12 over alleged doxxing linked to debt collection posts on social media. Investigators said that in late September 2026, 16 messages were posted from two personal accounts on one social media platform, each naming or identifying 15 individuals accused of failing to repay debts. The disclosed information allegedly included Chinese names, partial addresses, partial or full phone numbers, and redacted Hong Kong identity card images showing details such as names, partial identity card numbers, dates of birth, gender and photographs. The suspect was released on bail and the investigation is continuing.
Key Points
- The Privacy Commissioner’s office said the arrest took place in Kowloon on November 12 and involved a 20-year-old man suspected of breaching Hong Kong’s privacy law.
- The case concerns 16 social media posts published in late September 2026 through two personal accounts on a single platform.
- Authorities said the posts disclosed the personal data of 15 victims while alleging that they had outstanding debts that remained unpaid.
- Data exposed in the posts allegedly included Chinese names, partial addresses, partial or full phone numbers, and masked identity card images.
- Some messages also contained other photos, the victims’ company names and job titles, plus personal data relating to family members.
Why It Matters
The case underlines that debt collection does not exempt anyone from Hong Kong’s anti-doxxing rules, especially where identity documents and family information are circulated online. The Privacy Commissioner also warned that posting identity card copies or other sensitive personal data without consent can amount to a criminal doxxing offence, with the most serious cases carrying penalties of up to HK$1 million and five years’ imprisonment.