Hong Kong South China Athletic Association Ransomware Incident Exposes Member Personal Data

According to China Daily Hong Kong, citing an investigation by the Office of the Privacy Commissioner for Personal Data (PCPD), the South China Athletic Association (SCAA) suffered a ransomware attack in March 2024 that affected the personal data of 72,315 members ^[1]. The attack involved remote control, brute-force logins, and file encryption, compromising data including names, ID card or passport numbers, photographs, and contact information ^[1]. The PCPD identified multiple security deficiencies and issued an enforcement notice requiring the association to improve detection, risk assessment, and security auditing ^[1].

Industries mainly affected: Cross-industry

The PCPD identified multiple security deficiencies and issued an enforcement notice requiring the association to improve detection, risk assessment, and security auditing ^[1].