The personal data of more than 56,000 patients has been compromised in a significant data breach at the Hong Kong Hospital Authority (HA), which has now been reported to the Office of the Privacy Commissioner for Personal Data (PCPD). The leaked personal information includes sensitive details such as patients' names, identity card numbers, gender, dates of birth, hospital numbers, appointment dates, and other health-related information. The HA has pledged to fully cooperate with the police investigation and will be contacting the affected patients. She emphasized that the current level of public disclosure is inadequate and that the authority must determine if the breach occurred through a third-party vendor or a specific hospital cluster's network. Cybersecurity defenses and public trustThe breach has raised serious questions about the effectiveness of the HA's existing cybersecurity infrastructure.

Source: The Standard April 04, 2026 16:18 UTC