Legal Update: PCPD's Investigation Reports On Two Data Breach Incidents

In this update, Pádraig Walsh from our Data Privacy team looks at two investigation reports published by the Hong Kong Privacy Commissioner for Personal Data ("PCPD") into data breach incidents occurring in 2024.

Data breach incident of Kwong's Art Jewellery and My Jewelry

Brief overview: A brute-force attack was conducted on the companies' shared information systems to obtain administrator credentials, allowing unauthorised access to sensitive data held on the systems. The breach affected approximately 79,400 individuals, including corporate customers and employees. The compromised personal data included names, Hong Kong Identity Card numbers, dates of birth, and contact details.