Hong Kong privacy watchdog probes airline and electronics-retailer breaches as fraud victims lose up to HK$1.5 million

According to RTHK, Hong Kong's privacy commissioner received breach notifications from several airlines and electrical retailers and opened investigations, logging 51 complaints and 48 enquiries as of October 30 with losses from about HK$10,000 to over HK$1.5 million ^[1]. According to The Standard, the companies are Cathay Pacific, Hong Kong Airlines, Malaysia Airlines, YOHO and Broadway, and fraudsters use leaked purchase and flight details to craft convincing phishing or impersonate staff ^[2]. The PCPD urges the public to verify callers or messages via the merchant's official website, hotline or store before giving personal data or paying ^[1].

Industries mainly affected: Retail, Transportation & logistics

1. Verify any refund or return call or message via the merchant's official website, hotline or store first ^[1].
2. Never give callers bank account numbers, card numbers or passwords ^[1].