Hong Kong privacy watchdog probes data leaks at airline and retailer
Hong Kong's privacy commissioner has launched investigations into data breaches involving an airline and an electrical retailer. The office has received 51 complaints and 48 enquiries, with reported losses ranging from HK$10,000 to over HK$1.5 million. The public is warned about "precision scams" us
Hong Kong's Office of the Privacy Commissioner for Personal Data has received reports of data breaches from multiple organisations, including an airline and an electrical retailer, and has launched investigations under established procedures. As of last Friday, the office had received 51 complaints and 48 enquiries related to the incidents, with reported losses ranging from about HK$10,000 (US$1,285) to more than HK$1.5 million (US$192,800).
The privacy commissioner has warned the public to beware of "precision scams," in which fraudsters may use leaked personal data to create convincing phishing messages or emails, or impersonate staff or customer service representatives of the affected organisations. Using leaked shopping or flight details, scammers may falsely offer to arrange returns or refunds in order to trick people into providing bank account numbers, credit card numbers and passwords, or making transfers.
The commissioner reminded residents that even if a caller or message sender can recite their personal information, they should "stop and think" before providing further personal data or making any payment. The public is advised to verify the identity and authenticity of any request through the merchant's official website, official customer service hotline, or by visiting a physical store, and to check whether the merchant has issued any fraud warnings.
The office also advised the public to reject any suspicious requests for transfers. When handling compensation or refunds, merchants generally do not ask customers to pay any "deposit" or "handling fee" in advance, or to make a transfer to verify a bank account. People should never casually disclose sensitive information such as bank account numbers, credit card numbers and passwords to others.