LCSD’s New Booking System Suspected of Leaking Users’ Full Names; Privacy Commissioner Says Investigation Pending, “Doesn’t Want to Label It So Quickly”
康文署新訂場系統疑外洩用戶全名 私隱專員稱有待調查「唔想咁快定性」
Several public organisations, including Cyberport and the Consumer Council, have successively been hacked, resulting in large-scale leaks of personal information. Investigations by the Office of the Privacy Commissioner for Personal Data and the Hong Kong Productivity Council found that 70% of surveyed businesses had suffered at least one cyberattack in the past year, with attacks including new methods such as QR codes and AI-generated phishing. The Office received notifications of 119 data-breach incidents last year, 30% of which involved public organisations. SmartPLAY, the Leisure and Cultural Services Department’s new booking system, was found to have exposed members of the public’s full names in Chinese. Privacy Commissioner Ada Chung Lai-ling said she learned of the incident last night and had not yet received any enquiries or complaints. She said an investigation by the department was awaited and that she “doesn’t want to label it so quickly.”
數碼港及消委會等多個公營機構相繼被黑客入侵，發生大規模個人資訊外洩。個人資料私隱專員公署及生產力促進局的調查發現，七成受訪企業過去一年最少遭受一次網絡攻擊，被攻擊手法不乏二維碼、AI生成釣魚等全新手法。去年公署收到119宗資料外洩事故通報，公營機構佔三成。至於康文署新訂場系統SmartPLAY被揭發洩露市民中文全名，私隱專員鍾麗玲指昨晚得悉事件，暫時未收到任何查詢或投訴，有待部門調查「唔想咁快幫佢定性」。