bodyType

customContents

entityId

entityUuid

articlePageQuery

filter

article

articleBaseAdvertisingInfoArticle

articleListArticle

articleSeoArticle

hooksArticleAcknowledgementGateOverlayArticle

hooksTrackPageViewArticle

hooksContentInterestArticle

articleLinkingDataContent

hooksAmpRedirectArticle

articleSchemaContent

liveArticle

advertZone

sentiment

contentLock

topics

types

sections

paywallTypes

createdDate

publishedDate

urlAlias

moreOnThisArticles

sponsorType

commentCount

authorLocations

authors

corrections

displaySlideShow

multimediaEmbed

printHeadline

seriesContainer

articleSpeeches

socialHeadline

headline

images

flag

firstTopic

glossary

flattenTypeIds

image

relatedLinks

relatedNewsletters

__typename

sponsor

pdfFiles

seriesReverseOrder

series

disableOffPlatformContent

published

updatedDate

summary

subHeadline

body

keywords

readingTime

customTimezone

liveContents

Danny Mok

Police have managed to unlock the personal data for about 200,000 customers of a major Hong Kong travel agency after the information was held ransom by hackers for three days.
In a statement on Thursday, Hong Kong-listed Worldwide Package Travel Service, or WWPKG, said police had helped them decrypt the database, which had been encrypted by hackers since Monday morning.
The culprits had asked for a seven-figure ransom, to be paid in bitcoin, but the firm did not capitulate and called police instead.
“A preliminary police investigation showed no signs suggesting that the customer data had been sold,” the statement read.
Hack attack on popular Hong Kong travel agent WWPKG puts customer data at risk
A police spokesman confirmed the data had been decrypted, without providing details.
This came a day after the agency’s chief executive, Yuen Chun-ning, said 20,000 people – about 10 per cent of the affected customers – had had their credit card details leaked during the hackers’ unauthorised entry to the database, which handles company operations from reservations to payment.
Yuen said the hackers also stole phone numbers, passport information, Hong Kong identity card numbers and addresses.
The rise of ransomware: how data extortion became the biggest thing in cybercrime
A police source said the data had been locked by BitLocker, a tool built into Microsoft Windows that allows encryption. Officers had to analyse a large amount of data for traces left by the hackers before being able to decrypt the information.
The company said in its statement that customers who had used their credit cards for bookings on its website should monitor their accounts. They should also change the relevant passwords.
Due to the hacking incident, all four of the agency’s branches – in Tsim Sha Tsui, Mong Kok, Causeway Bay and Sha Tin – were closed on Tuesday and reopened the next day. Its website remained unavailable as of 8am on Friday.


UK sanctions Russian and Chinese firms, warns of cyber threats and hybrid warfare

Can Singapore’s cyber laws keep pace with speed of borderless online threats?

Federal communications agency may bar Chinese telecoms firms from US networks

‘Follow me’: UK’s Starmer launches TikTok account despite security ban

Cybersecurity

Hong Kong police unlock WWPKG travel agency customer data held ransom by hackers

All four branches of the agency were closed after the hack attack. Photo: Felix Wong

Hong Kong police unlock WWPKG travel agency customer data held ransom by hackers

.css-1c6uqr6{color:inherit;font-weight:inherit;font-size:inherit;font-family:inherit;line-height:inherit;overflow-wrap:break-word;}Culprits had demanded seven-figure sum, to be paid in bitcoin

Hack attack on popular Hong Kong travel agent WWPKG puts customer data at risk

Culprits had demanded seven-figure sum, to be paid in bitcoin