27th October 2026 – (Hong Kong) The Office of the Privacy Commissioner for Personal Data said it had launched investigations after receiving more than 40 inquiries and complaints linked to suspected data leaks at Hong Kong Airlines and electronics retailers Yoho and Broadway, following a wave of fraudulent calls made to customers. The regulator confirmed that more than 1,600 individuals were affected across the incidents and urged the public to verify the identity of any caller claiming to be a merchant, to refuse suspicious money‑transfer requests, and to keep records of all communications.
According to the watchdog, the breach at Hong Kong Airlines involved 815 passengers who travelled between 29th September and 22nd October, with exposed fields including names, phone numbers and flight details. A separate incident at Yoho affected 790 customers who placed orders between 29th September and 12th October, compromising names, phone numbers and delivery information. Customers later received suspected scam calls in which their personal data was cited, prompting reports to the authority and the companies concerned.
Broadway Photo Supply also submitted a data‑breach incident report to the commissioner. As of Monday, the office had received 23 complaints and 20 inquiries in total across the cases and said formal probes were under way in line with established procedures. The authority reminded organisations to strengthen safeguards around customer information, to notify affected users promptly, and to work with law enforcement where criminal activity is suspected.
