Personal data of 110,000 people leaked after breach at Hong Kong’s Companies Registry, investigation finds
- Case is third public body security breach announced in a week, after revelation of leaks at Electrical and Mechanical Services Department as well as the Consumer Council
- Lawmaker Elizabeth Quat says back-to-back occurrences highlight serious cybersecurity issues within government departments
An investigation into Hong Kong’s Companies Registry has revealed the online portal leaked personal data of 110,000 people, including names, passport and identity card numbers and residential addresses.
It was the third reported public body security breach in a week, and accountancy sector lawmaker Edmund Wong Chun-sek called it “truly a serious mistake”.
The registry said telephone numbers and email addresses were also disclosed, and it had started notifying victims with explanations and apologies.
“The Companies Registry is very concerned about the risk of personal data leakage,” a spokesman said.
“It is consulting the Office of the Privacy Commissioner for Personal Data and the Office of the Government Chief Information Officer, with a view to conducting a comprehensive review of the incident.”
The registry spokesman added that its contractor’s system design provided the client with not only search-related information but also additional personal information.