2nd November 2026 – (Hong Kong) The Office of the Privacy Commissioner for Personal Data said it has received multiple notifications of data breaches involving Hong Kong Airlines, Cathay Pacific, Malaysia Airlines, as well as electronics retailers Yoho Hong Kong and Broadway. As at 30th October, the authority had logged 51 complaints and 48 enquiries related to these incidents. Reported financial losses ranged from about HK$10,000 to more than HK$1.5 million, and formal investigations are under way.
The commissioner warned that fraudsters may exploit leaked personal information to craft convincing phishing messages or emails, or to pose as staff or customer‑service agents from the affected organisations in order to conduct “precision scams”. Using leaked shopping or flight‑booking details, scammers may falsely claim they can arrange returns or refunds and then induce victims to divulge bank account numbers, credit card numbers and passwords, or to make transfers.
Members of the public were urged to treat unsolicited calls, texts or emails claiming to be from company representatives with heightened caution. They should verify the caller’s identity even if the person can recite personal data, check whether merchants have issued scam alerts, refuse any suspicious transfer requests, and retain communication records so they can report them to the relevant organisations and authorities.
