According to statement by the Office of the Privacy Commissioner for Personal Data (PCPD) in HKSAR, Harbour Plaza Hotel Management Limited (Harbour Plaza) had over 1.2 million customers’ data accessed in a cybersecurity attack in early February. Accordingly, the PCPD started its investigation and requested Harbour Plaza to provide more information in relation to the incident, including the details of the incident and the types of personal data involved.
Jennifer Wu, a Hong Kong-based technology expert at Pinsent Masons said: “It is critical for companies to understand about their data infrastructure before these cyber-attacks. Whilst third party forensic experts can help to investigate the incident, lawyers are also required to manage the consequences faced by companies as a result of the non-compliance with the applicable data protection legislation.”
Earlier in the month, Hong Kong Technology Venture Company Limited (HKTV) confirmed suspicious online activities in its computer systems were detected in late January, involving unauthorised access to “a small portion” of the data held by its online retail platform HKTVmall on 4.38 million registered customers.