Hong Kong Department of Health HIV testing site email accounts suspected of improper use; no data leak
Hong Kong's Department of Health reported suspected improper use of email accounts linked to its HIV testing website. No data leak was detected. The website has been suspended for investigation, and police have been notified.
The Hong Kong Department of Health announced on 24 October that email accounts linked to its HIV testing service website are suspected of being improperly used. The department stressed that no data leak or loss has been found so far.
Department staff discovered the situation on the evening of 23 October and immediately conducted a full network inspection with an external service provider. An overnight investigation found no evidence of data loss or leakage. The case has been reported to the police and the Digital Policy Office.
The HIV testing service website will be suspended from 24 October until cybersecurity experts complete a full investigation and confirm there are no system security risks. During the suspension, citizens can still call the AIDS hotline (2780 2211) to book free, anonymous, and confidential HIV antibody tests.
The department emphasised that the suspicious emails or text messages were not sent by the Department of Health, which never notifies individuals in this manner. Members of the public who receive suspicious emails or text messages are advised not to click on any links or provide personal information. Anyone who has provided personal data to suspicious parties or believes they have been defrauded should contact the police.
The government said it always attaches great importance to network security. The Department of Health conducts regular information security risk assessments and will continue to review and improve its security measures to ensure they keep pace with evolving threats and protect network and system security.