Union Hospital in Hong Kong confirmed that it discovered a cybersecurity incident on the morning of April 15, 2024, disrupting parts of its operations [1]. The hospital activated incident response and system recovery procedures and notified the Department of Health, the Office of the Privacy Commissioner for Personal Data, and the police [1]. In a June 15 update, the hospital stated that an investigation by an independent cybersecurity consultant concluded there had been no unauthorized access to personal data in its systems [1].
Backfill: this event became public on Apr 18, 2024 and we added it on Nov 8, 2026. It is not a new event.
HighMonitoringBackfillOfficially confirmed
Hong Kong's Union Hospital Discloses April Cyberattack and Subsequent Investigation Findings
1 min read
- Disclosed
- Apr 18, 2024
- Occurred
- Apr 15, 2024
- Published
- Nov 8, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Healthcare
What to do nowOur advice
In a June 15 update, the hospital stated that an investigation by an independent cybersecurity consultant concluded there had been no unauthorized access to personal data in its systems [1].
Timeline
- Public disclosure of incident[1]
Technical details
Source-Supported Details
In a June 15 update, the hospital stated that an investigation by an independent cybersecurity consultant concluded there had been no unauthorized access to personal data in its systems [1].
Source excerpt for verification: "The Hospital reassures that all staff members have stayed vigilant on cyber security, with all patient records encrypted and password-protected at all times. Leakage of patient data is unfound as of now. Investigation of the attack is in progress." [1].
References
Official / primary1
- [1]
“The Hospital reassures that all staff members have stayed vigilant on cyber security, with all patient records encrypted and password-protected at all times. Leakage of patient data is unfound as of now. Investigation of the attack is in progress.”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.