According to Hong Kong Free Press (HKFP), citing an investigation by the Office of the Privacy Commissioner for Personal Data (PCPD), the Electrical and Mechanical Services Department (EMSD) experienced a data breach affecting approximately 17,000 individuals after learning in late April 2024 that the data remained publicly accessible [1]. Originally collected during COVID-19 testing operations in 2022, the data remained on ArcGIS Online after the contract ended and included identity, contact, and testing-related information [1]. The PCPD determined that regulations were violated regarding data retention and prevention of unauthorized access, and ordered the department to implement remedial measures [1].
This event has not been officially confirmed. Content is based on media or third-party reports.
Backfill: this event became public on Dec 9, 2024 and we added it on Nov 10, 2026. It is not a new event.
HighMonitoringBackfillMedia reported
Hong Kong EMSD COVID-19 Testing Data Left Publicly Accessible in the Cloud
1 min read
- Disclosed
- Dec 9, 2024
- Published
- Nov 10, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
- Attack vector
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Government
What to do nowOur advice
The PCPD determined that regulations were violated regarding data retention and prevention of unauthorized access, and ordered the department to implement remedial measures [1].
Timeline
- Incident publicly disclosed[1]
Technical details
Source-Supported Details
The PCPD determined that regulations were violated regarding data retention and prevention of unauthorized access, and ordered the department to implement remedial measures [1].
Source excerpt: "The office of the PCPD said last month that almost 70 per cent of Hong Kong companies experienced cyberattacks in the past year, as a survey found that firms’ cybersecurity awareness still stood at “basic” levels." [1].
References
Media1
- [1]
“The office of the PCPD said last month that almost 70 per cent of Hong Kong companies experienced cyberattacks in the past year, as a survey found that firms’ cybersecurity awareness still stood at “basic” levels.”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.