Data breach at third-party platform affects 153,000 in Hong Kong

AI-summarized · Neutrality-checked

An investigation by Hong Kong’s Office of the Privacy Commissioner for Personal Data (PCPD) confirmed that a third-party platform vulnerability resulted in a data breach affecting 153,866 students and staff across four tertiary institutions. City University of Hong Kong accounted for 96% of the affected accounts, while the Hong Kong Academy for Performing Arts and the Hong Kong Institute of Construction were also impacted. The compromised data was limited to names, student IDs, email addresses, usernames, course enrolment information, and user messages, with internal institutional systems remaining unaffected.

Consequences

The affected institutions will likely need to continue verification processes, as the total number of impacted individuals at the Hong Kong University of Science and Technology remained pending. As the breach involved identifiers such as email addresses and student IDs, institutions may face increased requirements to manage the security of these specific accounts to mitigate potential risks associated with the leaked credentials.

Sources

Know where. Know why.